@@ -75,9 +75,9 @@ lxc.mount.entry = shm {{escapeFstabSpaces $ROOTFS}}/dev/shm tmpfs {{formatMountL

 {{range $value := .Mounts}}

 {{if $value.Writable}}

-lxc.mount.entry = {{$value.Source}} {{escapeFstabSpaces $ROOTFS}}/{{escapeFstabSpaces $value.Destination}} none bind,rw 0 0

+lxc.mount.entry = {{$value.Source}} {{escapeFstabSpaces $ROOTFS}}/{{escapeFstabSpaces $value.Destination}} none rbind,rw 0 0

 {{else}}

-lxc.mount.entry = {{$value.Source}} {{escapeFstabSpaces $ROOTFS}}/{{escapeFstabSpaces $value.Destination}} none bind,ro 0 0

+lxc.mount.entry = {{$value.Source}} {{escapeFstabSpaces $ROOTFS}}/{{escapeFstabSpaces $value.Destination}} none rbind,ro 0 0

 {{end}}

 {{end}}

@@ -5,6 +5,7 @@ import (

 	"io/ioutil"

 	"os"

 	"os/exec"

+	"path/filepath"

 	"reflect"

 	"regexp"

 	"sort"

@@ -12,6 +13,7 @@ import (

 	"sync"

 	"testing"

+	"github.com/docker/docker/pkg/mount"

 	"github.com/docker/docker/pkg/networkfs/resolvconf"

 )

@@ -1142,6 +1144,44 @@ func TestDisallowBindMountingRootToRoot(t *testing.T) {

 	logDone("run - bind mount /:/ as volume should fail")

 }

+// Test recursive bind mount works by default

+func TestDockerRunWithVolumesIsRecursive(t *testing.T) {

+	tmpDir, err := ioutil.TempDir("", "docker_recursive_mount_test")

+	if err != nil {

+		t.Fatal(err)

+	}

+

+	defer os.RemoveAll(tmpDir)

+

+	// Create a temporary tmpfs mount.

+	tmpfsDir := filepath.Join(tmpDir, "tmpfs")

+	if err := os.MkdirAll(tmpfsDir, 0777); err != nil {

+		t.Fatalf("failed to mkdir at %s - %s", tmpfsDir, err)

+	}

+	if err := mount.Mount("tmpfs", tmpfsDir, "tmpfs", ""); err != nil {

+		t.Fatalf("failed to create a tmpfs mount at %s - %s", tmpfsDir, err)

+	}

+

+	f, err := ioutil.TempFile(tmpfsDir, "touch-me")

+	if err != nil {

+		t.Fatal(err)

+	}

+	defer f.Close()

+

+	runCmd := exec.Command(dockerBinary, "run", "--name", "test-data", "--volume", fmt.Sprintf("%s:/tmp:ro", tmpDir), "busybox:latest", "ls", "/tmp/tmpfs")

+	out, stderr, exitCode, err := runCommandWithStdoutStderr(runCmd)

+	if err != nil && exitCode != 0 {

+		t.Fatal(out, stderr, err)

+	}

+	if !strings.Contains(out, filepath.Base(f.Name())) {

+		t.Fatal("Recursive bind mount test failed. Expected file not found")

+	}

+

+	deleteAllContainers()

+

+	logDone("run - volumes are bind mounted recuursively")

+}

+

 func TestDnsDefaultOptions(t *testing.T) {

 	cmd := exec.Command(dockerBinary, "run", "busybox", "cat", "/etc/resolv.conf")