From 868ac5774c5048aa717d9b8c3c39a99d9f8617e5 Mon Sep 17 00:00:00 2001
From: "Gerber, Mike" <mike.gerber@sbb.spk-berlin.de>
Date: Tue, 11 Feb 2020 15:51:56 +0100
Subject: [PATCH] =?UTF-8?q?=F0=9F=8E=A8=20Improve=20structure=20and=20docu?=
 =?UTF-8?q?mentation=20of=20run?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 run | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

diff --git a/run b/run
index f6b73d4..1dbde1c 100755
--- a/run
+++ b/run
@@ -1,3 +1,14 @@
 #!/bin/sh
-# XXX Do not run privileged, use udica instead
-docker run --user `id -u`:`id -g` --rm -t --mount type=bind,src="$(pwd)",target=/data --privileged=true -e LOG_LEVEL=$LOG_LEVEL my_ocrd_workflow
+# Run the my_ocrd_workflow container on the current workspace
+
+# The container currently needs to run privileged to allow it to read from e.g.
+# /home on SELinux secured systems such as Fedora. We might want to use udica
+# instead in the future.
+
+docker run --privileged=true --rm -t \
+  \
+  --user `id -u`:`id -g` \
+  --mount type=bind,src="$(pwd)",target=/data \
+  \
+  -e LOG_LEVEL=$LOG_LEVEL \
+  my_ocrd_workflow