fix: don't leak /{run,tmp} into the final image (#1846)

Got exposed with bootc 1.13

See: d5c6515e23
This commit is contained in:
renner 2026-03-06 18:28:19 +01:00 committed by GitHub
parent 9955ac2133
commit 9a52918f6d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -143,4 +143,7 @@ RUN --network=none \
CMD ["/sbin/init"]
RUN bootc container lint
RUN --network=none \
--mount=type=tmpfs,dst=/run \
--mount=type=tmpfs,dst=/tmp \
bootc container lint