Commits on Feb 14, 2024

1. install: Mount /boot readonly by default …

   As we want to support enabling `root.transient` in some images,
   this means that things like `apt|dnf install foo` literally
   just works out of the box.
   
   However...we have a looming danger around things like
   kernels.  Typically the package installation scripts
   for those aren't going to handle this correctly.
   
   Let's mount `/boot` readonly by default, as we have been doing
   in Fedora CoreOS and derivatives for a while.
   
   Now I'm not totally happy with this because ultimately
   I think this should be configurable by the OS, not hardcoded
   in bootc.  We have some thought to put in to exactly how
   that's exposed.
   
   But for now let's set the precedent here.
   
   Signed-off-by: Colin Walters <walters@verbum.org>

   

   cgwalters committed Feb 14, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for 89f739a
   • Browse repository at this point

   Copy the full SHA

   89f739a View commit details

   Browse the repository at this point in the history