diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-08-01 04:10:33 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-08-01 04:21:54 +0900 |
| commit | 387b86bcdd7798a149ba2349cdf2a699f05cefe5 (patch) | |
| tree | ede8a378bb00664ba38ce4619e03f72507d7b415 /hst/template.go | |
| parent | 4e856438656ea0a1b30d52975f6b5415568df9a8 (diff) | |
app: integrate container autoroot
Doing this instead of mounting directly on / because it's impossible to ensure a parent is available for every path hakurei wants to mount to. This situation is similar to autoetc hence the similar name, however a symlink mirror will not work in this case.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'hst/template.go')
| -rw-r--r-- | hst/template.go | 11 |
1 files changed, 7 insertions, 4 deletions
diff --git a/hst/template.go b/hst/template.go index 3ab9c277..391e58e2 100644 --- a/hst/template.go +++ b/hst/template.go @@ -1,6 +1,7 @@ package hst import ( + "hakurei.app/container" "hakurei.app/container/seccomp" "hakurei.app/system" "hakurei.app/system/dbus" @@ -85,10 +86,12 @@ func Template() *Config { Dst: "/data/data/org.chromium.Chromium", Write: true, Must: true}, {Src: "/dev/dri", Device: true}, }, - Link: [][2]string{{"/run/user/65534", "/run/user/150"}}, - Etc: "/etc", - AutoEtc: true, - Cover: []string{"/var/run/nscd"}, + Link: [][2]string{{"/run/user/65534", "/run/user/150"}}, + AutoRoot: "/var/lib/hakurei/base/org.debian", + RootFlags: container.BindWritable, + Etc: "/etc", + AutoEtc: true, + Cover: []string{"/var/run/nscd"}, }, } } |