Ophestra 38245559dc container/ops: mount dev readonly ...

There is usually no good reason to write to /dev. This however doesn't work in internal/app because FilesystemConfig supplied by ContainerConfig might add entries to /dev, so internal/app follows DevWritable with Remount instead.

Signed-off-by: Ophestra <cat@gensokyo.uk>

2025-08-03 19:18:53 +09:00

..

seccomp

container: use more reliable nonexistence

2025-07-18 23:18:26 +09:00

vfs

treewide: migrate to hakurei.app

2025-07-03 03:30:39 +09:00

autoetc.go

container/ops: autoetc implementation to separate file

2025-07-31 19:54:03 +09:00

autoroot.go

container: implement autoroot as setup op

2025-08-01 04:04:36 +09:00

capability.go

container: move capset implementation

2025-07-07 13:47:13 +09:00

container_test.go

container/ops: mount dev readonly

2025-08-03 19:18:53 +09:00

container.go

container: improve clone flags readability

2025-08-02 18:19:44 +09:00

executable_test.go

treewide: migrate to hakurei.app

2025-07-03 03:30:39 +09:00

executable.go

container: move out of toplevel

2025-07-03 02:59:43 +09:00

init_test.go

container: check cancel signal delivery

2025-07-28 01:04:29 +09:00

init.go

container: implement autoroot as setup op

2025-08-01 04:04:36 +09:00

mount_test.go

container/mount: mount data escape helper function

2025-08-03 17:46:14 +09:00

mount.go

container/mount: move tmpfs sysroot prefixing to caller

2025-08-03 18:06:41 +09:00

msg.go

container: move out of toplevel

2025-07-03 02:59:43 +09:00

ops.go

container/ops: mount dev readonly

2025-08-03 19:18:53 +09:00

output.go

container: move out of toplevel

2025-07-03 02:59:43 +09:00

params.go

container: move out of toplevel

2025-07-03 02:59:43 +09:00

path.go

treewide: migrate to hakurei.app

2025-07-03 03:30:39 +09:00

syscall_amd64.go

container: move syscall constants

2025-07-07 13:23:01 +09:00

syscall.go

container: move capset implementation

2025-07-07 13:47:13 +09:00

sysctl.go

container: move out of toplevel

2025-07-03 02:59:43 +09:00