sharhalakis / fsprotect

Debian tool (helper scripts) to make filesystems immutable
30 stars 5 forks source link

bind-mount for plain access directories specified in kernel cmdline #1

Open mgrechukh opened 8 years ago

mgrechukh commented 8 years ago

Hello,

I needed this feature on my netbook for be able to use docker, it does not work on aufs over aufs. Probably there are another possible cases when this may be useful.

(also, i noticed you didn't update github for a while, - in another branch "devel" i blindly put over the ubuntu package. You may merge this also, if you want)

Regards.

sharhalakis commented 8 years ago

Hi there,

If I understand it correctly, this patch bind-mounts directories of the old / partition over the aufs, in order to make them volatile (i.e. excluding them from the aufs stack).

If that's the case, then do you think that this is needed in such an early stage? I.e. does this need to be done in the initramfs stage? I'd personally think that the init script is a more suitable place for such an action.

What do you think?

Thanks, Stefanos