The docker volume now support some propagation options as following:

-v, --volume=[host-src:]container-dest[:]: Bind mount a volume.
The comma-delimited options are [rw|ro], [z|Z], or
[[r]shared|[r]slave|[r]private]. The 'host-src' is an absolute path or a
name value.

So if I specified a volume as shared, then does the volume is rw or ro? What is the relationship of [rw|ro] and [[r]shared|[r]slave|[r]private].

Also can anyone help explain what does [z|Z] mean here?

Thanks.