Tools
MCP reference server Dockerfiles get SELinux bind-mount labels so they build under Podman
PR #2205, merged 2026-08-30, patches the fetch, git and time reference server Dockerfiles to add the `Z` private label on bind mounts referenced by `RUN`. Without it SELinux blocks the container's access to the bind-mounted `/app/pyproject.toml` and `/app/uv.lock` and the build fails outright, so those three servers could not be built on a Podman plus SELinux host. The 15-line change cites Red Hat's container labeling guidance and the OWASP Docker security cheat sheet.
Source
↳ Follow the thread