resource "docker_image" "foo" {
  name = "nginx:latest"
}

resource "docker_container" "foo" {
  name  = "tf-test"
  image = docker_image.foo.latest

  tmpfs = {
    "/mount/tmpfs" = "rw,noexec,nosuid"
  }
}