Enable local persistent storage
Machine-specific data, such as SSH keys, should not be included in the immutable root filesystem image, as this would prevent multiple machines running from the same image. These few files can be stored locally, on the SD card on eMMC flash. The first time a machine boots up using this image, its local storage is initialized. This involves creating a new filesystem on the block device and generating SSH host keys. Once the storage is initialized, it is remounted read-only. All subsequent mounts are read-only as well.
This commit is contained in:
@@ -2,4 +2,6 @@ tmpfs /var/lib/rsyslog tmpfs defaults 0 0
|
||||
tmpfs /var/log tmpfs defaults 0 0
|
||||
tmpfs /var/lib/systemd tmpfs defaults 0 0
|
||||
tmpfs /var/lib/NetworkManager tmpfs defaults 0 0
|
||||
/dev/mmcblk0 /run/storage ext4 ro,noexec,nosuid,nodev,x-systemd.makefs 0 2
|
||||
overlay /etc/ssh overlay ro,lowerdir=/etc/ssh:/run/storage/ssh,noexec,nodev,nosuid,x-systemd.requires-mounts-for=/run/storage 0 0
|
||||
/dev/nbd1 swap swap noauto,x-systemd.makefs 0 0
|
||||
|
||||
Reference in New Issue
Block a user