Machine-specific data, such as SSH keys, should not be included in the immutable root filesystem image, as this would prevent multiple machines running from the same image. These few files can be stored locally, on the SD card on eMMC flash. The first time a machine boots up using this image, its local storage is initialized. This involves creating a new filesystem on the block device and generating SSH host keys. Once the storage is initialized, it is remounted read-only. All subsequent mounts are read-only as well.
8 lines
420 B
Plaintext
8 lines
420 B
Plaintext
tmpfs /var/lib/rsyslog tmpfs defaults 0 0
|
|
tmpfs /var/log tmpfs defaults 0 0
|
|
tmpfs /var/lib/systemd tmpfs defaults 0 0
|
|
tmpfs /var/lib/NetworkManager tmpfs defaults 0 0
|
|
/dev/mmcblk0 /run/storage ext4 ro,noexec,nosuid,nodev,x-systemd.makefs 0 2
|
|
overlay /etc/ssh overlay ro,lowerdir=/etc/ssh:/run/storage/ssh,noexec,nodev,nosuid,x-systemd.requires-mounts-for=/run/storage 0 0
|
|
/dev/nbd1 swap swap noauto,x-systemd.makefs 0 0
|