agent: support read-only rootfs

Julio Montes · Julio Montes · commit b67fcc8c8b56 · 2019-03-20T08:40:15.000-06:00
mount /run as a tmpfs to support read-only rootfs. fixes kata-containers#495 Signed-off-by: Julio Montes <julio.montes@intel.com>
diff --git a/agent.go b/agent.go
@@ -62,6 +62,7 @@ var initRootfsMounts = []initMount{
 	{"devtmpfs", "dev", "/dev", []string{"nosuid"}},
 	{"tmpfs", "tmpfs", "/dev/shm", []string{"nosuid", "nodev"}},
 	{"devpts", "devpts", "/dev/pts", []string{"nosuid", "noexec"}},
+	{"tmpfs", "tmpfs", "/run", []string{"nosuid", "nodev"}},
 }
 
 type process struct {

Original file line number	Diff line number	Diff line change
`@@ -62,6 +62,7 @@ var initRootfsMounts = []initMount{`
`62`	`62`	`{"devtmpfs", "dev", "/dev", []string{"nosuid"}},`
`63`	`63`	`{"tmpfs", "tmpfs", "/dev/shm", []string{"nosuid", "nodev"}},`
`64`	`64`	`{"devpts", "devpts", "/dev/pts", []string{"nosuid", "noexec"}},`
	`65`	`+ {"tmpfs", "tmpfs", "/run", []string{"nosuid", "nodev"}},`
`65`	`66`	`}`
`66`	`67`
`67`	`68`	`type process struct {`