Debugging procedure should use bind mounts with selinux label
Compare changes
+ 1
− 1
@@ -294,7 +294,7 @@ The best way to debug your builds locally is to run them within the same Docker
Ref. https://docs.docker.com/storage/bind-mounts/#configure-the-selinux-label
If you use selinux you can add the z or Z options to modify the selinux label of the host file or directory being mounted into the container. This affects the file or directory on the host machine itself and can have consequences outside of the scope of Docker.
The z option indicates that the bind mount content is shared among multiple containers.
The Z option indicates that the bind mount content is private and unshared.
Otherwise you need to deal with Selinux yourself, by default mounted volume will show permission denied.