When you bind mount a path that itself contains mounts, those submounts are

also included in the bind mount by default. This behavior is configurable,

using the `bind-recursive` option for `--mount`. This option is only supported

with the `--mount` flag, not with `-v` or `--volume`.

If the bind mount is read-only, the Docker Engine makes a best-effort attempt

at making the submounts read-only as well. This is referred to as recursive

read-only mounts. Recursive read-only mounts require Linux kernel version 5.12

or later. If you're running an older kernel version, submounts are

automatically mounted as read-write by default. Attempting to set submounts to

be read-only on a kernel version earlier than 5.12, using the

`bind-recursive=readonly` option, results in an error.

Supported values for the `bind-recursive` option are:

| Value | Description |

|:--------------------|:------------------------------------------------------------------------------------------------------------------|

| `enabled` (default) | Read-only mounts are made recursively read-only if kernel is v5.12 or later. Otherwise, submounts are read-write. |

| `disabled` | Submounts are ignored (not included in the bind mount). |

| `writable` | Submounts are read-write. |

| `readonly` | Submounts are read-only. Requires kernel v5.12 or later. |

- Learn about [storage drivers](/storage/storagedriver/).