anchor.diff:  The Cloud Controller always runs Docker containers on Diego with user 
   namespaces enabled.
   This security restriction prevents certain features, such as the ability to mount FuseFS devices, from working in Docker containers.
  -It is possible for Docker applications to use fuse mounts via <a href="#volume">volume services</a>, but not possible to directly mount fuse 
  -devices from within the container.
  +Docker applications can use fuse mounts through [volume services](#volume), but they cannot directly mount fuse devices from within the container.
   
   To mitigate security concerns, Cloud Foundry recommends that you run only 
   trusted Docker containers on the platform.
  
positive.code: 
  To perform the procedures in this topic, you must install cf CLI v6.13.0 or 
  later. 
  See <a href="../cf-cli/install-go-cli.html">Installing the cf CLI</a> for more 
  information.
  For information about pushing a Docker image with a previous version of the cf 
  CLI, see <a href= 'https://github.com/cloudfoundry-incubator/diego-design-notes/blob/master/docker-support.md'>Docker Support in CF + Diego</a>.
  
  When pushing an app, you specify either a Docker image on Docker Hub or a URI 
  to a trusted Docker registry. 
  Diego does not support using private registries.
  Also, when using Diego, you must use a registry that supports the <a href="https://docs.docker.com/registry/spec/api/">Docker Registry API V2</a>.
  
  ###<a id='public'></a>Push a Docker Image Using Docker Hub
  
  
negative.code: 
  Replace `MY-PRIVATE-REGISTRY.DOMAIN` with your domain name, which resolves to 
  the private registry.
  This example uses the following values: 
  
  * `5000`: The port on which your private registry serves traffic. 
  * `image/name`: The name of the Docker image repository. 
  * `v2`: A tag in the specified Docker image repository that refers to a specific image.
  
  ###<a id='volume'></a> Docker Volume Support
  
  Diego now supports Docker volumes. 
  For more information about enabling volume support, see the [Using an External File System (Volume Services)](../devguide/services/using-vol-services.html) topic.
  For information about the limitations of NFS volumes, see the [NFS Bosh Volume Release](https://github.com/cloudfoundry-incubator/nfs-volume-release#special-notes-for-docker-image-based-apps).
  