Skip to content

Support Mount the container's root filesystem as read only ( --read-only option ) for docker executor

Description

  • There is a --read-only option to create a docker container
  • This is a requirement to pass CIS_Docker_Benchmark
    • "Ensure that the container's root filesystem is mounted as read only"
  • Support this option for the docker executor

Proposal

Links to references