mirror of
https://github.com/flatcar/scripts.git
synced 2025-08-07 13:06:59 +02:00
The existing code seems to assume that the mounts inherited from the system are private, the Linux default. However on our systems that clearly isn't the case, all system mounts are set as shared. Considering all of us have been have been seeing mounts leak out of the SDK despite cros_sdk creating a new filesystem namespace via unshare I'm guessing this is a systemd thing. Instead force all system mounts to 'slave' mode in the SDK namespace so global changes are still visible but no SDK mounts can leak out. |
||
---|---|---|
.. | ||
enter_chroot.sh | ||
make_chroot.sh | ||
make_conf_util.sh |