readonly

YannikBramkamp · Dec 23, 2020 · da7273d · da7273d
1 parent 4063d1a
commit da7273d
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/docker.go b/docker.go
@@ -603,10 +603,10 @@ func (p *DockerProvider) CreateContainer(ctx context.Context, req ContainerReque
 	mounts := []mount.Mount{}
 	for hostPath, innerPath := range req.BindMounts {
 		mounts = append(mounts, mount.Mount{
-			Type:        mount.TypeBind,
-			Source:      hostPath,
-			Target:      innerPath,
-			BindOptions: &mount.BindOptions{Propagation: "private"},
+			Type:     mount.TypeBind,
+			Source:   hostPath,
+			Target:   innerPath,
+			ReadOnly: true,
 		})
 	}
 	for volumeName, innerPath := range req.VolumeMounts {