Default Mounts

By default, a number of directories from the host computer will become available inside your container. These include your home directory, the current working directory where the container was started, and some system folders. On Vista, in addition to your home directory, the container has access to your $SCRATCH and $WORK directories. Other directories inside the container are part of the container's definition. In the default configuration, from inside the container you can see all the files in your home directory, but you might want to consider creating some separation between the host computer and the container.

Limiting Host Access with -C

If you don't want the container to have access to everything on your computer, you can specify the -C option when you execute it, which prevents the container from accessing the host. This is good practice if you are not absolutely confident in what the container is doing.

Other Options for Limiting Access

There are some variants on how to limit access to the host computer. If you just want to exclude your home directory, you can use --no-home. If you want to specify particular folders that would normally be mounted as folders that should not be mounted, you can specify --no-mount. In addition, the -e option prevents the container from inheriting any environment variables from the host computer.