From 9bc8532d56fc5c1f727919d21f464dff09316913 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Tue, 26 Aug 2025 03:15:32 +0900 Subject: container/initdev: mount tmpfs on shm for ro dev Programs expect /dev/shm to be a writable tmpfs. Signed-off-by: Ophestra --- internal/app/container_linux.go | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'internal/app/container_linux.go') diff --git a/internal/app/container_linux.go b/internal/app/container_linux.go index b1c4fa42..cd423ad6 100644 --- a/internal/app/container_linux.go +++ b/internal/app/container_linux.go @@ -233,7 +233,9 @@ func newContainer(s *hst.ContainerConfig, os sys.State, prefix string, uid, gid // no more ContainerConfig paths beyond this point if !s.Device { - params.Remount(container.AbsFHSDev, syscall.MS_RDONLY) + params. + Remount(container.AbsFHSDev, syscall.MS_RDONLY). + Tmpfs(container.AbsFHSDev.Append("shm"), 0, 01777) } return params, maps.Clone(s.Env), nil -- cgit v1.3.1