Description

bowie2211

opened on Aug 13, 2026

Issue body actions

Describe the enhancement or feature you would like

When using the CPython devcontainer image on SELinux-enabled Linux hosts, a plain bind mount may fail with Permission denied inside the container.

Example:

docker run -it --rm \
  -v "$PWD:/workspace" \
  -w /workspace \
  ghcr.io/python/devcontainer:latest

In that case, a SELinux-compatible bind mount works:

  docker run -it --rm \
  -v "$PWD:/workspace:Z" \
  -w /workspace \
  ghcr.io/python/devcontainer:latest

Without relabeling, /workspace may not be readable from inside the container.

It may be helpful to add a short note to the local Docker/devcontainer documentation for SELinux-enabled hosts, preferably using the :Z bind-mount form.

Describe alternatives you have considered

As an alternative workaround, this also works:

docker run -it --rm \
  --security-opt label=disable \
  -v "$PWD:/workspace" \
  -w /workspace \
  ghcr.io/python/devcontainer:latest

Additional context

No response

Activity

1. bowie2211

   added

   type-featureAdditions; New content or section neededAdditions; New content or section needed

   on Aug 13, 2026
2. pranavchoudhary-tech commented on Aug 14, 2026

   

   pranavchoudhary-tech

   on Aug 14, 2026

   Contributor

   More actions

   I'd be happy to handle this. I will submit a PR adding the SELinux bind-mount note to the devcontainer documentation.
3. Anusha27-08 commented on Oct 9, 2026

   

   Anusha27-08

   on Oct 9, 2026 · Hidden as low-quality

   show commentMore actions
4. Poojabala30 commented on Oct 10, 2026

   

   Poojabala30

   on Oct 10, 2026 · Hidden as low-quality

   show commentMore actions
5. pavithraramesh5500-ship-cse commented on Oct 19, 2026

   

   pavithraramesh5500-ship-cse

   on Oct 19, 2026 · Hidden as low-quality

   show commentMore actions
6. pranavchoudhary-tech

   added a commit that references this issue on Oct 22, 2026

   docs: document SELinux bind-mount requirement for devcontainer (pytho…

   45627d2
7. pranavchoudhary-tech commented on Oct 22, 2026

   

   pranavchoudhary-tech

   on Oct 22, 2026 · Hidden as resolved

   show commentMore actions

Issue actions