Instruct podman to relabel volume with a private unshared label

SELinux may deny permissions to the Jekyll container preventing it
from reading the website files. The 'Z' option instructs podman to
apply a private unshared label to the files on the host allowing the
container access.

Author: NitrogenPointBlue

Makefile

@@ -5,6 +5,6 @@ clean:
 	$(RM) -r _site
 
 rootless:
-	podman run --interactive --tty --publish 4000:4000 --volume .:/srv/jekyll --env JEKYLL_ROOTLESS=1 jekyll/jekyll:pages jekyll serve
+	podman run --interactive --tty --publish 4000:4000 --volume .:/srv/jekyll:Z --env JEKYLL_ROOTLESS=1 jekyll/jekyll:pages jekyll serve
 
 .PHONY: all clean rootless