mount: require verity

containers · Oct 28, 2024 · 12186ff · 12186ff
1 parent 9c5fde5
commit 12186ff
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/mount.rs b/src/mount.rs
@@ -79,6 +79,7 @@ pub fn mount_fd<F: AsFd>(image: F, basedir: &Path, mountpoint: &str) -> Result<(
     let overlayfs = FsHandle::open("overlay")?;
     fsconfig_set_string(overlayfs.as_fd(), "metacopy", "on")?;
     fsconfig_set_string(overlayfs.as_fd(), "redirect_dir", "on")?;
+    fsconfig_set_string(overlayfs.as_fd(), "verity", "require")?;
 
     // unfortunately we can't do this via the fd: we need a tmpdir mountpoint
     let tmp = TmpMount::mount(erofs.as_fd())?; // NB: must live until the "create" operation