diskimage-builder/releasenotes/notes/sysfs-ro-b127a6df2d78e57c.yaml

---
upgrade:
  - |
    Base installs now mount ``/sys`` read-only in chroot environemnts.
    This is a good indication to various tools and scripts that that
    they are running in a unprivileged/containerised environment.
Mount /sys RO As noted inline, this works around potential issues by being a strong indication you are in a container (e.g. [1]). Since nothing should be changing anything on the host/build system, this is a generically safer way to operate. [1] https://bugzilla.redhat.com/show_bug.cgi?id=1975588 Change-Id: Ic6802c4ffc2e825f129af10717860a2d1770fe80 2021-07-01 23:26:20 +00:00			`---`
			`upgrade:`
			`- \|`
			Base installs now mount ``/sys`` read-only in chroot environemnts.
			`This is a good indication to various tools and scripts that that`
			`they are running in a unprivileged/containerised environment.`