Docker，装载卷为只读(Docker, mount volumes as readonly)

 我正在和Docker一起工作，我想安装一个变化很大的dyanmic文件夹（所以我不必为每个执行的docker做这个代码，这样做太贵了），但是我希望该文件夹是只读的。 将文件夹所有者更改为其他工作，但是chown需要root访问，我不希望暴露给应用程序。 
 
 当我使用-v标志挂载时，它给出了我给出的任何用户名，我在docker映像中创建了一个非root用户，但是所有者作为运行docker的用户的卷中的所有文件都会更改为用户I从命令行给出，所以我不能做只读文件和文件夹。 我该如何防止这种情况？ 
 
 我还添加了mustafa ALL=(docker) NOPASSWD: /usr/bin/docker ，所以我可以通过终端更改到另一个用户，但是文件仍然有我的用户的权限。 

I am working with Docker,and I want to mount a dyanmic folder that changes a lot (so I do not have to make dockers for each ones execution, which would be too costly), but I want that folder to be readonly. Changing the folder owners to someone else works however chown requires root access, which I would not prefer to expose to an application. 
 
When I use -v flag to mount, it gives whatever the username I give, I created a non root user inside the docker image, however all the files in the volume with the owner as the user that ran docker, changes into the user I give from commandline, so I cannot make readonly files and folders. How can I prevent this? 
 
I also added mustafa ALL=(docker) NOPASSWD: /usr/bin/docker, so I could change to another user via terminal, but still the files have permissions for my user.

原文：https://stackoverflow.com/questions/19158810