From 387b86bcdd7798a149ba2349cdf2a699f05cefe5 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Fri, 1 Aug 2025 04:10:33 +0900 Subject: app: integrate container autoroot Doing this instead of mounting directly on / because it's impossible to ensure a parent is available for every path hakurei wants to mount to. This situation is similar to autoetc hence the similar name, however a symlink mirror will not work in this case. Signed-off-by: Ophestra --- hst/template.go | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) (limited to 'hst/template.go') diff --git a/hst/template.go b/hst/template.go index 3ab9c277..391e58e2 100644 --- a/hst/template.go +++ b/hst/template.go @@ -1,6 +1,7 @@ package hst import ( + "hakurei.app/container" "hakurei.app/container/seccomp" "hakurei.app/system" "hakurei.app/system/dbus" @@ -85,10 +86,12 @@ func Template() *Config { Dst: "/data/data/org.chromium.Chromium", Write: true, Must: true}, {Src: "/dev/dri", Device: true}, }, - Link: [][2]string{{"/run/user/65534", "/run/user/150"}}, - Etc: "/etc", - AutoEtc: true, - Cover: []string{"/var/run/nscd"}, + Link: [][2]string{{"/run/user/65534", "/run/user/150"}}, + AutoRoot: "/var/lib/hakurei/base/org.debian", + RootFlags: container.BindWritable, + Etc: "/etc", + AutoEtc: true, + Cover: []string{"/var/run/nscd"}, }, } } -- cgit v1.3.1