From 3d7a87a12c7792395b28e3ba645d21938d8a6342 Mon Sep 17 00:00:00 2001
From: Jared Norman <jared@super.gd>
Date: Fri, 3 Jul 2026 11:23:25 -0700
Subject: [PATCH] Add SELinux labels to docker-compose bind mounts

On SELinux-enforcing hosts (e.g. Fedora, RHEL) running podman, bind
mounts without the "z" label are blocked by SELinux, so the project
directory appears empty inside the container and bundler exits with
"Could not locate Gemfile". The label is a no-op where SELinux is not
enforcing, so this is safe for Docker users.
---
 docker-compose.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 631d71e701..7c56e9db6a 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -46,10 +46,10 @@ services:
     ports:
       - "${SANDBOX_PORT:-3000}:${SANDBOX_PORT:-3000}"
     volumes:
-      - .:/home/solidus_user/app:delegated
+      - .:/home/solidus_user/app:delegated,z
       - bundle:/home/solidus_user/gems:cached
       - history:/home/solidus_user/history:cached
-      - .dockerdev/.psqlrc:/home/solidus_user/.psqlrc:cached
+      - .dockerdev/.psqlrc:/home/solidus_user/.psqlrc:cached,z
     tty: true
     stdin_open: true
     tmpfs: