{"action":"created","issue":{"url":"https://api.github.com/repos/appc/spec/issues/364","labels_url":"https://api.github.com/repos/appc/spec/issues/364/labels{/name}","comments_url":"https://api.github.com/repos/appc/spec/issues/364/comments","events_url":"https://api.github.com/repos/appc/spec/issues/364/events","html_url":"https://github.com/appc/spec/issues/364","id":72923437,"number":364,"title":"Volumes: three-level volumes definitions are confusing","user":{"login":"thockin","id":5595220,"avatar_url":"https://avatars.githubusercontent.com/u/5595220?v=3","gravatar_id":"","url":"https://api.github.com/users/thockin","html_url":"https://github.com/thockin","followers_url":"https://api.github.com/users/thockin/followers","following_url":"https://api.github.com/users/thockin/following{/other_user}","gists_url":"https://api.github.com/users/thockin/gists{/gist_id}","starred_url":"https://api.github.com/users/thockin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thockin/subscriptions","organizations_url":"https://api.github.com/users/thockin/orgs","repos_url":"https://api.github.com/users/thockin/repos","events_url":"https://api.github.com/users/thockin/events{/privacy}","received_events_url":"https://api.github.com/users/thockin/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":9,"created_at":"2015-05-04T05:01:48Z","updated_at":"2015-09-19T01:03:30Z","closed_at":"2015-09-19T01:03:30Z","body":"The whole three-level volume thing is confusing to me (and I dreamed up the kubernetes two-level system, so ...).  I think this warrants some energy in simplifying, but I am guessing this ties into concerns about \"what\" to run and \"how\" to run it.\r\n\r\nSpecifically, the need to expresss mountpoints on an image: Does this mean that I can not do clever things with mount points and extant images?  E.g. bind mounting host stuff in to random places... This has been very powerful in Dockerland - e.g. injecting a binary via a volume, using that as the entrypoint, and slingshotting to the \"real\" entrypoint, all without the container image's participation.\r\n\r\nI get the desire to say \"I only accept volumes on path X\" but I think that is not sufficient to prevent trouble, and I think it is over-constraining.  At the very least, it deserves some thorough explanation.  But having to thread volume info into three places is just too much for my poor brain. \r\n"},"comment":{"url":"https://api.github.com/repos/appc/spec/issues/comments/141605504","html_url":"https://github.com/appc/spec/issues/364#issuecomment-141605504","issue_url":"https://api.github.com/repos/appc/spec/issues/364","id":141605504,"user":{"login":"jonboulle","id":2601015,"avatar_url":"https://avatars.githubusercontent.com/u/2601015?v=3","gravatar_id":"","url":"https://api.github.com/users/jonboulle","html_url":"https://github.com/jonboulle","followers_url":"https://api.github.com/users/jonboulle/followers","following_url":"https://api.github.com/users/jonboulle/following{/other_user}","gists_url":"https://api.github.com/users/jonboulle/gists{/gist_id}","starred_url":"https://api.github.com/users/jonboulle/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jonboulle/subscriptions","organizations_url":"https://api.github.com/users/jonboulle/orgs","repos_url":"https://api.github.com/users/jonboulle/repos","events_url":"https://api.github.com/users/jonboulle/events{/privacy}","received_events_url":"https://api.github.com/users/jonboulle/received_events","type":"User","site_admin":false},"created_at":"2015-09-19T01:03:30Z","updated_at":"2015-09-19T01:03:30Z","body":"Simplified in #495"}}