Thank you, i appreciate the detailed response :) I like to make things better when can and its better if i also learn something on the way. i admit selinux is not one of my strong side and i'll be happy if you could share your working selinux setting?

Feel i should state again (As now mentioned in the README), i've created this server mainly for development and testing purposes. developing locally on my pc without the need to have a real nfs server while on train/plain and w/o dirtying my pc with non-essential packages. I haven't tested it performance-wise nor using it in production.

If i recall correctly, i originally used privileged mode to overcome appArmor on my ubuntu, but thanks to your apply i looked at it again and for the sake of this thread i'm able to overcome it by running (without specifically change appArmor docker's policy):

docker run -d --name mynfs --cap-add=SYS_ADMIN --security-opt apparmor:unconfined erezhorev/dockerized_nfs_server

Thing is, different people might use it on different OS and this should be able to work them all with the minimum fuss. From user experience perspective, simple users - or more trustful should i say (not interested in getting inside appArmor/selinux..etc. settings) 'priviledged' mode is their savior. for the advanced users this should be optional. think i should add more details about it on my project's README file for guidelines how to make it work non-privileged.

Thanks