{"record":{"id":"23be5994d65759c4","repo":"portainer/portainer","slug":"forbidden-to-use-bind-mounts","errorCode":null,"errorMessage":"forbidden to use bind mounts","messagePattern":"forbidden to use bind mounts","errorType":"http","errorClass":"ErrBindMountsForbidden","httpStatus":403,"severity":"error","filePath":"api/http/proxy/factory/docker/containers.go","lineNumber":33,"sourceCode":"\t\"github.com/portainer/portainer/api/http/proxy/factory/utils\"\n\t\"github.com/portainer/portainer/api/http/security\"\n\t\"github.com/portainer/portainer/api/internal/authorization\"\n\t\"github.com/portainer/portainer/api/logs\"\n\n\t\"github.com/docker/docker/client\"\n\t\"github.com/segmentio/encoding/json\"\n)\n\nconst containerObjectIdentifier = \"Id\"\n\nvar (\n\tErrPrivilegedModeForbidden        = errors.New(\"forbidden to use privileged mode\")\n\tErrPIDHostNamespaceForbidden      = errors.New(\"forbidden to use pid host namespace\")\n\tErrDeviceMappingForbidden         = errors.New(\"forbidden to use device mapping\")\n\tErrSysCtlSettingsForbidden        = errors.New(\"forbidden to use sysctl settings\")\n\tErrSecurityOptSettingsForbidden   = errors.New(\"forbidden to use security-opt settings\")\n\tErrContainerCapabilitiesForbidden = errors.New(\"forbidden to use container capabilities\")\n\tErrBindMountsForbidden            = errors.New(\"forbidden to use bind mounts\")\n)\n\ntype PartialMount struct {\n\tType          string `json:\"Type\"`\n\tSource        string `json:\"Source\"`\n\tVolumeOptions *struct {\n\t\tDriverConfig *struct {\n\t\t\tName    string            `json:\"Name\"`\n\t\t\tOptions map[string]string `json:\"Options\"`\n\t\t} `json:\"DriverConfig\"`\n\t} `json:\"VolumeOptions\"`\n}\n\nfunc referencedVolumeNames(binds []string, mounts []PartialMount) []string {\n\tvar names []string\n\n\tfor _, bind := range binds {\n\t\tif docker.IsBindPath(bind) {","sourceCodeStart":15,"sourceCodeEnd":51,"githubUrl":"https://github.com/portainer/portainer/blob/17e74456ff6e794b9d5439ec3fa06922aa18a3f8/api/http/proxy/factory/docker/containers.go#L15-L51","documentation":"Error \"forbidden to use bind mounts\" thrown in portainer/portainer.","triggerScenarios":"Thrown at api/http/proxy/factory/docker/containers.go:33 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"17e74456ff6e794b9d5439ec3fa06922aa18a3f8","analyzedAt":"2026-08-26T23:09:01.915Z","schemaVersion":2},"datasetVersion":"2026-08-27T03:17:27.898Z"}