无法在docker中使用解释器运行python脚本权限被拒绝

我很新的docker，我试图隔离我的Python解释器与一些模块，但我坚持在一开始。

我创build了一个简单的脚本，如：

print "Hello world" 

将其保存在/home/my_user/script.py

比运行docker run -it --rm --name my-first-python-script -v /home/my_user:/home/my_user python:2 python /home/my_user/script.py

并得到

python: can't open file '/home/my_user/script.py': [Errno 13] Permission denied

我如何使用正确的权限运行它？

Docker版本1.10.3，build e03ddb8 / 1.10.3

操作系统是Fedora 23（工作站版）

看起来像它的selinux故障。 现在，我还不知道如何解决这个问题。

 SELinux is preventing python from read access on the file h.py. ***** Plugin catchall (100. confidence) suggests ************************** If you believe that python should be allowed read access on the h.py file by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # ausearch -c 'python' --raw | audit2allow -M my-python # semodule -X 300 -i my-python.pp Additional Information: Source Context system_u:system_r:container_t:s0:c364,c980 Target Context unconfined_u:object_r:user_home_t:s0 Target Objects h.py [ file ] Source python Source Path python Port <Unknown> Host densolovev Source RPM Packages Target RPM Packages Policy RPM selinux-policy-3.13.1-224.fc25.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name densolovev Platform Linux densolovev 4.8.6-300.fc25.x86_64 #1 SMP Tue Nov 1 12:36:38 UTC 2016 x86_64 x86_64 Alert Count 1 First Seen 2017-03-11 20:59:09 +07 Last Seen 2017-03-11 20:59:09 +07 Local ID 4cfe1e00-555b-4294-aa88-e057cf831959 Raw Audit Messages type=AVC msg=audit(1489240749.667:329): avc: denied { read } for pid=4951 comm="python" name="h.py" dev="dm-2" ino=2102911 scontext=system_u:system_r:container_t:s0:c364,c980 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=0 Hash: python,container_t,user_home_t,file,read 

Answer 1

这是答案。 用以下方法装载：Z参数。

 -v /home/my_user:/home/my_user:Z 

在这里find

https://stackoverflow.com/a/31334443/7682723