fix: remove host bind mount for /tmp for trustd

Not sure why this mount was needed, but it was added long time ago, and
I believe it's no longer needed.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
This commit is contained in:
Andrey Smirnov 2024-07-10 19:56:21 +04:00
parent ce4c404e14
commit 398151e64f
No known key found for this signature in database
GPG Key ID: FE042E3D4085A811

View File

@ -138,7 +138,6 @@ func (t *Trustd) Runner(r runtime.Runtime) (runner.Runner, error) {
// Set the mounts. // Set the mounts.
mounts := []specs.Mount{ mounts := []specs.Mount{
{Type: "bind", Destination: "/tmp", Source: "/tmp", Options: []string{"rbind", "rshared", "rw"}},
{Type: "bind", Destination: filepath.Dir(constants.TrustdRuntimeSocketPath), Source: filepath.Dir(constants.TrustdRuntimeSocketPath), Options: []string{"rbind", "ro"}}, {Type: "bind", Destination: filepath.Dir(constants.TrustdRuntimeSocketPath), Source: filepath.Dir(constants.TrustdRuntimeSocketPath), Options: []string{"rbind", "ro"}},
} }