diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-08-26 03:15:32 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-08-26 03:27:07 +0900 |
| commit | 9bc8532d56fc5c1f727919d21f464dff09316913 (patch) | |
| tree | 1c933c8c4fec2c0516b3f70fe8d5bb75cc2259dc /internal/app/container_linux.go | |
| parent | 07194c74cb464cb073cabda33779c1782eaf0d74 (diff) | |
container/initdev: mount tmpfs on shm for ro dev
Programs expect /dev/shm to be a writable tmpfs.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/app/container_linux.go')
| -rw-r--r-- | internal/app/container_linux.go | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/internal/app/container_linux.go b/internal/app/container_linux.go index b1c4fa42..cd423ad6 100644 --- a/internal/app/container_linux.go +++ b/internal/app/container_linux.go @@ -233,7 +233,9 @@ func newContainer(s *hst.ContainerConfig, os sys.State, prefix string, uid, gid // no more ContainerConfig paths beyond this point if !s.Device { - params.Remount(container.AbsFHSDev, syscall.MS_RDONLY) + params. + Remount(container.AbsFHSDev, syscall.MS_RDONLY). + Tmpfs(container.AbsFHSDev.Append("shm"), 0, 01777) } return params, maps.Clone(s.Env), nil |