hst: optionally cover /run/ early

This works around awkward root permissions. Signed-off-by: Ophestra <cat@gensokyo.uk>
2026-06-17 02:59:48 +09:00
parent e1a1e1e399
commit 08112f0b90
10 changed files with 31 additions and 6 deletions
@@ -113,6 +113,9 @@ func (s *spRuntimeOp) toContainer(state *outcomeStateParams) error {

 	}

+	if state.Container.Flags&hst.FCoverRun != 0 {
+		state.params.Tmpfs(fhs.AbsRun, xdgRuntimeDirSize, 0755)
+	}
 	state.params.Tmpfs(fhs.AbsRunUser, xdgRuntimeDirSize, 0755)
 	if state.Container.Flags&hst.FShareRuntime != 0 {
 		_, runtimeDirInst := s.commonPaths(state.outcomeState)