{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/10714","labels_url":"https://api.github.com/repos/docker/docker/issues/10714/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/10714/comments","events_url":"https://api.github.com/repos/docker/docker/issues/10714/events","html_url":"https://github.com/docker/docker/issues/10714","id":57383919,"number":10714,"title":"Volume mounted :ro  loses restriction when crossing a host mount point?","user":{"login":"davidraila","id":5068742,"avatar_url":"https://avatars.githubusercontent.com/u/5068742?v=3","gravatar_id":"","url":"https://api.github.com/users/davidraila","html_url":"https://github.com/davidraila","followers_url":"https://api.github.com/users/davidraila/followers","following_url":"https://api.github.com/users/davidraila/following{/other_user}","gists_url":"https://api.github.com/users/davidraila/gists{/gist_id}","starred_url":"https://api.github.com/users/davidraila/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/davidraila/subscriptions","organizations_url":"https://api.github.com/users/davidraila/orgs","repos_url":"https://api.github.com/users/davidraila/repos","events_url":"https://api.github.com/users/davidraila/events{/privacy}","received_events_url":"https://api.github.com/users/davidraila/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2015-02-11T21:58:59Z","updated_at":"2015-04-16T14:05:22Z","closed_at":"2015-03-19T14:22:18Z","body":"Mapping a host volume ro, where host has mounts within the\r\nmapped path, the ro restriction is not applied once the hosts mount-point is crossed from within the container, as demonstrated when I thought I might map my entire host read-only:\r\n\r\nHost:\r\nFilesystem     1K-blocks      Used Available Use% Mounted on\r\n/dev/sda3      460030500 307655252 152375248  67% /\r\ntmpfs            8220152       536   8219616   1% /tmp\r\n\r\ndocker run -it -v /:/host:ro ubuntu bash\r\nroot@62b3edab74c6:/# touch /host/#asdf\r\ntouch: cannot touch '/host/#asdf': Read-only file system\r\nroot@62b3edab74c6:/# touch /host/tmp/#asdf\r\nroot@62b3edab74c6:/# ls -l !$\r\nls -l /host/tmp/#asdf\r\n-rw-r--r-- 1 root root 0 Feb 11 21:50 /host/tmp/#asdf\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/93742856","html_url":"https://github.com/docker/docker/issues/10714#issuecomment-93742856","issue_url":"https://api.github.com/repos/docker/docker/issues/10714","id":93742856,"user":{"login":"cgb","id":202961,"avatar_url":"https://avatars.githubusercontent.com/u/202961?v=3","gravatar_id":"","url":"https://api.github.com/users/cgb","html_url":"https://github.com/cgb","followers_url":"https://api.github.com/users/cgb/followers","following_url":"https://api.github.com/users/cgb/following{/other_user}","gists_url":"https://api.github.com/users/cgb/gists{/gist_id}","starred_url":"https://api.github.com/users/cgb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cgb/subscriptions","organizations_url":"https://api.github.com/users/cgb/orgs","repos_url":"https://api.github.com/users/cgb/repos","events_url":"https://api.github.com/users/cgb/events{/privacy}","received_events_url":"https://api.github.com/users/cgb/received_events","type":"User","site_admin":false},"created_at":"2015-04-16T14:05:22Z","updated_at":"2015-04-16T14:05:22Z","body":"I hit this today with 1.5.0.  /data1/media/{tv_shows,movies,music} are all NFS mounts.  I passed /data1/media into a plex container with ro flag and was surprised to see ro only applies to the /data1/media location.  At the very least, documentation (e.g. http://docs.docker.com/userguide/dockervolumes/) should be updated to reflect this gotcha so users are at least warned of the side effect."}}