https://bugzilla.redhat.com/show_bug.cgi?id=1224417
--- Comment #4 from Daniel Walsh dwalsh@redhat.com --- Well I see a couple of problems here. docker_var_lib_t would be the label I would add, so it matches and is not writable by the container. Mounting the tmpfs would end up being tmpfs_t and nfs would probably be nfs_t, unless you are using labeled nfs.
Volume mounting with the Z,z would solve some problems, at least for the tmpfs_t.