Add SELinux label for all volumes

make/docker-compose.clair.tpl

@@ -24,8 +24,8 @@ services:
     env_file:
       ./common/config/clair/postgres_env
     volumes:
-      - ./common/config/clair/postgresql-init.d/:/docker-entrypoint-initdb.d
-      - /data/clair-db:/var/lib/postgresql/data
+      - ./common/config/clair/postgresql-init.d/:/docker-entrypoint-initdb.d:z
+      - /data/clair-db:/var/lib/postgresql/data:z
     logging:
       driver: "syslog"
       options:  
@@ -41,7 +41,7 @@ services:
     depends_on:
       - postgres
     volumes:
-      - ./common/config/clair:/config
+      - ./common/config/clair:/config:z
     logging:
       driver: "syslog"
       options:  

make/docker-compose.notary.tpl

@@ -15,7 +15,7 @@ services:
       - notary-sig
       - harbor-notary
     volumes:
-      - ./common/config/notary:/config
+      - ./common/config/notary:/config:z
     depends_on:
       - notary-db
       - notary-signer
@@ -34,7 +34,7 @@ services:
         aliases:
           - notarysigner
     volumes:
-      - ./common/config/notary:/config
+      - ./common/config/notary:/config:z
     env_file:
       - ./common/config/notary/signer_env
     depends_on:
@@ -53,8 +53,8 @@ services:
         aliases:
           - mysql
     volumes:
-      - ./common/config/notary/mysql-initdb.d:/docker-entrypoint-initdb.d
-      - /data/notary-db:/var/lib/mysql
+      - ./common/config/notary/mysql-initdb.d:/docker-entrypoint-initdb.d:z
+      - /data/notary-db:/var/lib/mysql:z
     environment:
       - TERM=dumb
       - MYSQL_ALLOW_EMPTY_PASSWORD="true"

make/docker-compose.tpl

@@ -76,7 +76,7 @@ services:
     volumes:
       - ./common/config/ui/app.conf:/etc/ui/app.conf:z
       - ./common/config/ui/private_key.pem:/etc/ui/private_key.pem:z
-      - ./common/config/ui/certificates/:/etc/ui/certificates/
+      - ./common/config/ui/certificates/:/etc/ui/certificates/:z
       - /data/secretkey:/etc/ui/key:z
       - /data/ca_download/:/etc/ui/ca/:z
       - /data/psc/:/etc/ui/token/:z