Skip to content

Allow ACL image to be mounted as read-only.#771

Open
cwize1 wants to merge 2 commits into
mainfrom
user/chrisgun/aclMounts
Open

Allow ACL image to be mounted as read-only.#771
cwize1 wants to merge 2 commits into
mainfrom
user/chrisgun/aclMounts

Conversation

@cwize1

@cwize1 cwize1 commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

The ACL image doesn't include placeholder directories for the standard linux directories (e.g. /dev) or even its own mounts (e.g. /oem). This causes problems for IC when mounting the ACL as read-only because some of the directories are missing for the mounts.

To workaround this issue, an overlay is used to create the placeholder directories underneath the root partition. That way, IC has directories it can attach the mounts to.

To facilitate this workaround, IC needs to know what the target distro is earlier in the process: in-between partition discovery and mounting.

Also, the DistroHandler instance is now passed between more components, instead of being (re-)discovered in multiple places.

Also, ensure there is a single place where all the potential os-release paths are listed.

Also, log when a DistroHandler instance is created and which one. This could help with debugging issues relating to the picked DistroHandler implementation.


Checklist

  • Tests added/updated
  • Documentation updated (if needed)
  • Code conforms to style guidelines

The ACL image doesn't include placeholder directories for the standard
linux directories (e.g. /dev) or even its own mounts (e.g. /oem). This
causes problems for IC when mounting the ACL as read-only because some
of the directories are missing for the mounts.

To workaround this issue, an overlay is used to create the placeholder
directories underneath the root partition. That way, IC has directories
it can attach the mounts to.

To facilitate this workaround, IC needs to know what the target distro
is earlier in the process: in-between partition discovery and mounting.

Also, the DistroHandler instance is now passed between more
components, instead of being (re-)discovered in multiple places.

Also, ensure there is a single place where all the potential
`os-release` paths are listed.

Also, log when a DistroHandler instance is created and which one. This
could help with debugging issues relating to the picked DistroHandler
implementation.
@cwize1 cwize1 requested a review from a team as a code owner June 9, 2026 23:59
Comment thread toolkit/tools/pkg/imagecustomizerlib/selinuxpolicyoutput.go Outdated
Comment thread toolkit/tools/pkg/imagecustomizerlib/imageutils.go Outdated
Comment thread toolkit/tools/pkg/imagecustomizerlib/imageutils.go Outdated
Comment thread toolkit/tools/pkg/imagecustomizerlib/partitionutils.go
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants