[atomic-devel] BTRFS/SELinux patch just got merged in docker.

[Daniel J Walsh <dwalsh redhat com>]

https://github.com/docker/docker/pull/16452

This patch will allow you to run your docker containers with SELinux
locked down.  Prior to this you needed to
disable SELinux in docker (Not on the host).

The patch is doing a little bit of nastiness in that it is recursively
relabeling the image on container creation.
You could see a slow down on image creation of 1-2 seconds.  After the
container is created, there is no
slow down in start and stop of the container.

We would prefer to eventually get the kernel fixed to allow built in
btrfs labeling but this at least allows us to
fix this in userspace.  Now we need to fix overlayfs.

Dan