aboutsummaryrefslogtreecommitdiffhomepage
path: root/internal/app/seal_linux.go
diff options
context:
space:
mode:
authorOphestra <cat@gensokyo.uk>2025-08-25 17:51:08 +0900
committerOphestra <cat@gensokyo.uk>2025-08-25 17:52:57 +0900
commit1438096339f49bdd466f3b057c7e695aa126fc3c (patch)
treea374384097ab7346c0a1cb730edc1c838f5adbc7 /internal/app/seal_linux.go
parent059164d4fa80047fc50bffc1582424d00cf4c139 (diff)
hst/config: handle filesystem entry targeting root
This allows any fstype supported by hst to be directly mounted on sysroot. A special case in internal/app applies the matching entry early and excludes it from path hiding. Closes #5. Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/app/seal_linux.go')
-rw-r--r--internal/app/seal_linux.go10
1 files changed, 8 insertions, 2 deletions
diff --git a/internal/app/seal_linux.go b/internal/app/seal_linux.go
index 23d65f95..fb6f39b6 100644
--- a/internal/app/seal_linux.go
+++ b/internal/app/seal_linux.go
@@ -244,8 +244,14 @@ func (seal *outcome) finalise(ctx context.Context, sys sys.State, config *hst.Co
Tty: true,
AutoEtc: true,
- AutoRoot: container.AbsFHSRoot,
- RootFlags: container.BindWritable,
+ Filesystem: []hst.FilesystemConfigJSON{
+ {&hst.FSBind{
+ Target: container.AbsFHSRoot,
+ Source: container.AbsFHSRoot,
+ Write: true,
+ AutoRoot: true,
+ }},
+ },
}
// bind GPU stuff