2 ms·

You can use unshare to create a read-only view of the file system, without going all the way to containers.[0] [0]: https://gist.github.com/cocagne/4088467 htt

You can use unshare to create a read-only view of the file system, without going all the way to containers.[0] [0]: https://gist.github.com/cocagne/4088467 https://gist.github.com/cocagne/4088467

isodude 8y ago
This should be the default mode, and you could activate it with a --rw flag
akavel 8y ago
Thanks a lot for the link! I'll totally try to look into this. If it really proves to be as easy as a single syscall... Oh, wow, now that'd be a killer...