Make /sysroot private before mounting anything below it to avoid that those mounts get propagated into processes with private mount namespaces such as systemd-udevd. Previously, the mounts were propagated but the umounts after --make-rslave /sysroot weren't.
Make /sysroot private before mounting anything below it to avoid that those mounts get propagated into processes with private mount namespaces such as systemd-udevd. Previously, the mounts were propagated but the umounts after --make-rslave /sysroot weren't.