nspawn: mount os-release in two steps to make it read-only
authorLuca Boccassi <luca.boccassi@microsoft.com>
Thu, 16 Jul 2020 08:47:16 +0000 (09:47 +0100)
committerLuca Boccassi <luca.boccassi@microsoft.com>
Thu, 16 Jul 2020 08:59:59 +0000 (09:59 +0100)
commit14f1c47a0cd0c9ad9c30e2354a0fdba26417ccf0
treea4e752f18e185e73d8dcf2be1032feb79cd271ff
parenteafc7d60569064f30663a93463b7c5df5768bac6
nspawn: mount os-release in two steps to make it read-only

The kernel interface requires setting up read-only bind-mounts in
two steps, the bind first and then a read-only remount.
Fix nspawn-mount, and cover this case in the integration test.

Fixes #16484
src/nspawn/nspawn-mount.c
test/units/testsuite-13.sh