Long notation of volumes bind mount handle the selinux labels

[zhangguanzhang]

Fixes: #13396

What I did

Related issue

(not mandatory) A picture of a cute animal, if possible in relation to what you did

[ndeloof]

your test case doesn't strictly reproduce #13396 a containers/podman#27600 relies on setting create_host_path: false (so, use the mount API)

Using the long notation, this attribute must be explicitly set (it defaults to true using the short notation)

[ndeloof]

this has no effect as return false is the default

[zhangguanzhang]

your test case is ok but the fix isn't. The actual root cause is that CreateHostPath isn't set to true by default as it is supposed to be by the spec.

also see compose-spec/compose-go#836

I think I understand. Does it mean this issue should be fixed in the repository https://github.com/compose-spec/compose-go?

[ndeloof]

The root cause is compose-spec/compose-go@978e4cf was missing an update to ServiceVolumeBind.String() to include SELinux

my bad, need one more coffee or read the code more carrefuly :)

[ndeloof]

the actual root cause is that, when using the Mount API, Compose can't set SELinux flag as there's no such option on the mount API (see https://github.com/moby/moby/blob/18d2a08fcf1e02aaccc25482267b714f994ba014/api/types/mount/mount.go#L27)

you can report this to github.com/moby/moby