Merge pull request #1997 from giuseppe/check-mount-layers-ro

check: mount layer as read-only
containers · Jul 8, 2024 · ec18420 · ec18420
2 parents 9dd25f9 + b90afbd
commit ec18420
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/check.go b/check.go
@@ -366,7 +366,7 @@ func (s *store) Check(options *CheckOptions) (CheckReport, error) {
 			if options.LayerMountable {
 				func() {
 					// Mount the layer.
-					mountPoint, err := s.graphDriver.Get(id, drivers.MountOpts{MountLabel: layer.MountLabel})
+					mountPoint, err := s.graphDriver.Get(id, drivers.MountOpts{MountLabel: layer.MountLabel, Options: []string{"ro"}})
 					if err != nil {
 						err := fmt.Errorf("%slayer %s: %w", readWriteDesc, id, err)
 						if isReadWrite {