diff --git a/container/container_unix.go b/container/container_unix.go
index 84ee87afce367..a0a747beeaacb 100644
--- a/container/container_unix.go
+++ b/container/container_unix.go
@@ -457,5 +457,6 @@ func (container *Container) SecretMount(rootUID, rootGID int) (*Mount, error) {
 	m.Source = secretsPath
 	m.Destination = "/run/secrets"
 	m.Writable = true
+	m.Propagation = "rprivate"
 	return m, nil
 }