From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Tue, 29 Sep 2026 10:07:23 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-ed1-f61.google.com (mail-ed1-f61.google.com [209.85.208.61]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 68T87NwW019930 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Tue, 29 Sep 2026 10:07:23 +0200 Received: by mail-ed1-f61.google.com with SMTP id 4fb4d7f45d1cf-6ac7659d3f4sf2217016a12.2 for ; Tue, 29 Sep 2026 01:07:23 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1790669238; cv=pass; d=google.com; s=arc-20260327; b=DrioqGnmvDvkInCZNUYOy+qvzbqNPknHQdHB3iInQqLzXTZEDT2VMEPYIFScVKiHYi xkARQFD5SxHncIxra+vx+4CbK0mKMWZyknAkGlqggrpKM+OGk0pQUKpKBHnWGQpiEbfD e9hQSDpw4tojkwL3BBRZt5CmoNEQp0Dxc+lg2M4MsV1ndhWCRkJpyILkkZusSASMw3fz kCjUf6NZadXFASGE6gHJsjY9wUjaoYYitoc3xpwHJeHDGKyOwLMSVITy+gpxrjDU9KMN jCWF4xyb+dolGqBgj180gL4UR1cJupy8y1yc3PBQkMLXZ6WPcRlqUXUacEcXu8uzak/Y cXIg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :sender:dkim-signature; bh=LVVM5y3IX48kDGkl8Yf1JK3Owusvh91/4jliSe74pJM=; fh=a/NNNNNPtPunrgCcRWh4Lb2dibCr6j0Slc0A8h+WfDs=; b=mTGr8EuVCdAnOMpJLRQHeKfBsnaKx/Lnu2udJV1t3iOEjHQfoJdkQuFXm4vm7mgD1c XUJbCpHWbWrcqEP/NxmZViKG6tLiwB+8plNCgB4ZNUK0Y/Efi1Y7EyUSJcy+OL65is7q dV0Y8RRkBBsTT8Dy438dnx1kNIExd915y/EaJyCDlz4Tuo8RwNj+Z7uyZvjYdmvoDI5f 4ziJt8XNCnzBxHpnKs9h/sEbOQu4i9zQX/ShqULcb1fLWQ9TWzft/Pn9NUqXPGCpV/zd QSvTzpl6vd9KS/UTK1cavOKZxKTIAFDI+4f7BP9rnc09z61+oCyNq0XEOGVfsH1HQk2K EmXg==; darn=ilbers.de ARC-Authentication-Results: i=2; gmr-mx.google.com; spf=pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=wzh@ilbers.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1790669238; x=1791274038; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:content-type:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :sender:from:to:cc:subject:date:message-id:reply-to:content-type; bh=LVVM5y3IX48kDGkl8Yf1JK3Owusvh91/4jliSe74pJM=; b=addVFPbM4tXH6qgF3Vo1zmaQTCqK0dXHJ+Cgi/YLAK2lR3IX5M06rzqPonv0xtu0G6 lvi/VzgWvIuPNsza6VxzyYLS1Pul7TUr5jI/tNPK9aIdM5JTyD8nifcJgODJOoKjY4SB w1QbrmyFUKS3StL6L5bmjavVH6O+zGq0QXAF47oxsxtHA9d1YtyFRtQsO3kcGwfuEMKA Olm3c99a1nKgQSvEmbkX1AINqoLKwmji/88Vkeqd1/S91BU/EgE+B3eF9/U0R73qc4FI xnsLGlyE4Ink9SVSAYsJWd/sNegN8mviYzbgArBcmznLJqGHlxEu+Ux0fk+YqN07F5WV 9pIQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1790669238; x=1791274038; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence :x-original-authentication-results:x-original-sender:content-type :in-reply-to:from:content-language:references:cc:to:subject :user-agent:mime-version:date:message-id:x-beenthere :x-gm-message-state:sender:from:to:cc:subject:date:message-id :reply-to:content-type; bh=LVVM5y3IX48kDGkl8Yf1JK3Owusvh91/4jliSe74pJM=; b=bKhp/fo6D2k/Ns6A2JJyjP7lKAcY4NXM2knp1GKbOXw1eKmkYHfmdJRqAreIdODlVh SXvqg4L9VFY081lsdIQhVkqw0rIvNUc8v5o4wfLEJ4qmSP5obk9puqLn/DOvsVcz7weW 52LpfpryZNNBU+aE1z36NuaG9TDcbtydiA8PYalCCcuurz8/0y3N2fCFT4VlxzMe9rmt fnj/GwGWgrTe8QFLPLM2y3UniKVBhKDQxgcKpRFK381mkz5JIrwWbj1hqSr+k3W93r99 t05tJG6aaXRm0CLC8cNtI9aNRBf7qx0Ke7Z6TLriu/CWvViClLxlr/RJAgvGLb4ki/Rs Y5qg== Sender: isar-users@googlegroups.com X-Forwarded-Encrypted: i=2; AKwUvByzgmRw40eqOkGRYMFjKy3gsilQn5cFQeQEi7UznlCi82aiuXUs2alhnIBMhd/1TAHulG4L@ilbers.de X-Gm-Message-State: AFq9FYLdstjkAmyeXJJN5YNuS51Duy1miE5dN0JvqQ0rAWmzTyg3ZU1m cHBgF2McaC4dwhCvnL64GThOdE82Zx/Gt67dGW9c20ogA63HAvaoUVFj X-Received: by 2002:a05:6402:13d3:b0:6aa:96b3:9d7b with SMTP id 4fb4d7f45d1cf-6aacc87b6c9mr11798834a12.45.1790669237579; Tue, 29 Sep 2026 01:07:17 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLddBs72z82xFn1888OS7CWb+78E6wWhPtMVUV+xcw1eUXQ==" Received: by 2002:a05:6402:a29b:10b0:6ac:af2f:b502 with SMTP id 4fb4d7f45d1cf-6acaf2fb719ls192733a12.1.-pod-prod-05-eu; Tue, 29 Sep 2026 01:07:15 -0700 (PDT) X-Forwarded-Encrypted: i=2; AKwUvBxCUcP8BC9uusmc2o3aZxC6zht9vWHHMo4Funn86PaFhIQrRREoBqV7X7g3dkJR+QW8hmc2OnyXF7zO@googlegroups.com X-Received: by 2002:a17:906:7306:b0:c29:4490:50d6 with SMTP id a640c23a62f3a-c2ac552ca05mr1208821266b.47.1790669234803; Tue, 29 Sep 2026 01:07:14 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1790669234; cv=none; d=google.com; s=arc-20260327; b=Q8KPue3QngyDcBegJPUBeSs686LGmrMzWqLVxIgTf32C+A8nnketAGQ58647waYCxA NP+j2+VqRRSM0JGdZ0c/tUUaZq7oNFhnJmqHD0dsLjpdsEM+xQJW2wnVT5462BEx8JAe I0GnqQL0t05eSlMNTtjqO7RJRUK1pNaqlmAO8wWpVnCjVAh+6aElNAhibH5/EXBVccxp 2k0ajxWipJFErRQFjb+qtPiTxjCVBYsw12wVM8Y6t6PZcEsooz5zZG0M6gw8A/Qw9rzj l9hPZ6wVYYXc4Xu8P1pKAHWpBujfaTuzXXhcE+wj5Eeujx9RWA7Q3am2XiaeFNfDK6aJ chlA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id; bh=TMI4teBefVcMxxYu2iT76GSbJ+s+VjOPeOf8QsL/1/o=; fh=r93w4w0m3ErQbH07lWIT61SQCnVVqBLzHhJxbFPBltA=; b=qvsCGMeBEGSJTly7N9tg2yOCECQx9PYO+BWzr1FDWkrO++AxnRwHVLdBlIkMJMgi2W NiUjRNVpoGi0xUOKt19YSNkJ3OV/N7XAnItbsKLTUVzEDTxyvZoaJQ3dwHXAfcld4CG9 Y+DMseDitCoVe9UGMrG9dpmDhXy25wPJ+2XWb2R6WqNa6z8dlWFkd1cKi8AKHdF1IYBU U3tsbBoAF3TXy3t9MpPOl8aveBPv5UFkEncwZsKeOejHbi5SPgCULx+lSRh68seojdGO Vio2whQLf/wc9uwB5NsECAuKaG4N9yT7F9ka+OktKTonrWRfBMNzMzTcTnCvxrB+p4vQ sXBQ==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=wzh@ilbers.de Received: from shymkent.ilbers.de (shymkent.ilbers.de. [85.214.156.166]) by gmr-mx.google.com with ESMTPS id a640c23a62f3a-c2afa46f94csi16217766b.1.2026.09.29.01.07.14 for (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Tue, 29 Sep 2026 01:07:14 -0700 (PDT) Received-SPF: pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) client-ip=85.214.156.166; Received: from [192.168.178.139] ([88.130.203.42]) (authenticated bits=0) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPSA id 68T87DKg019918 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 29 Sep 2026 10:07:14 +0200 Message-ID: <64f00659-3c6a-4b57-96c7-3499e6ce65a8@ilbers.de> Date: Tue, 29 Sep 2026 10:07:13 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH 1/1] isar-mounts: mount /run as tmpfs for systemd execution in chroot To: Felix Moessbauer , isar-users@googlegroups.com Cc: Jan Kiszka References: <20260923143350.2086040-1-felix.moessbauer@siemens.com> Content-Language: en-US From: Zhihang Wei In-Reply-To: <20260923143350.2086040-1-felix.moessbauer@siemens.com> Content-Type: text/plain; charset="UTF-8"; format=flowed X-Spam-Status: No, score=-4.6 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-Original-Sender: wzh@ilbers.de X-Original-Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=wzh@ilbers.de Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-TUID: 5EgPQg4aAH19 Applied to next, thanks. Zhihang On 9/23/26 16:33, 'Felix Moessbauer' via isar-users wrote: > When running systemd inside the chroot, it might access /run and place > files there. These can have ownerships (like 0000) which require DAC > capabilities for traversing and removing. As this is tricky to achieve > across all cleanup code, we stick to the systemd file system hierarchy > and mount /run as a tmpfs. By that, all files below it will > automatically be dropped when leaving the namespace. > > This solves cleanup issues on rootless like: > find: '<...>/rootfs/run/systemd/dissect-root': Permission denied > > As we anyways cleanup the /run in do_rootfs_finalize (image only), this > does not change the content of the image. However, it improves the > reproduciblity of our internal rootfs' which can improve caching. > > Reported-by: Jan Kiszka > Signed-off-by: Felix Moessbauer > --- > meta/classes-global/base.bbclass | 4 ++++ > 1 file changed, 4 insertions(+) > > diff --git a/meta/classes-global/base.bbclass b/meta/classes-global/base.bbclass > index 8f81ab70..3d5d1c12 100644 > --- a/meta/classes-global/base.bbclass > +++ b/meta/classes-global/base.bbclass > @@ -399,6 +399,10 @@ def insert_isar_mounts(d, rootfs, mounts): > lines.append('mount -t devpts -o noexec,nosuid,uid=5,mode=620,ptmxmode=666 none {}/dev/pts'.format(rootfs)) > lines.append('( cd {}/dev; ln -sf pts/ptmx . )'.format(rootfs)) > lines.append('mount -t tmpfs none {}/dev/shm'.format(rootfs)) > + # required by systemd file-system hierarchy > + lines.append('mount -t tmpfs -o mode=0755 tmpfs {}/run'.format(rootfs)) > + # required by Debian policy 9.1.4 > + lines.append('mkdir {}/run/lock'.format(rootfs)) > lines.append('mount -o bind /dev/random {}/dev/random'.format(rootfs)) > lines.append('mount -o bind /dev/urandom {}/dev/urandom'.format(rootfs)) > lines.append('mount -t proc none {}/proc'.format(rootfs)) -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/64f00659-3c6a-4b57-96c7-3499e6ce65a8%40ilbers.de.