fix: enable rootfs propagation for stargz-snapshotter

See siderolabs/talos#7953 Signed-off-by: Andrey Smirnov <[email protected]>
siderolabs · Nov 13, 2023 · 5914368 · 5914368
1 parent 8eb47b1
commit 5914368
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/container-runtime/stargz-snapshotter/manifest.yaml b/container-runtime/stargz-snapshotter/manifest.yaml
@@ -7,4 +7,4 @@ metadata:
     This system extension provides Stargz Snapshotter using containerd's runtime handler.
   compatibility:
     talos:
-      version: ">= v1.0.0"
+      version: ">= v1.6.0"
diff --git a/container-runtime/stargz-snapshotter/stargz-snapshotter.yaml b/container-runtime/stargz-snapshotter/stargz-snapshotter.yaml
@@ -8,6 +8,8 @@ container:
   args:
     - --address=/var/run/containerd-stargz-grpc/containerd-stargz-grpc.sock
     - --log-level=debug
+  security:
+    rootfsPropagation: shared
   mounts:
     - source: /etc/ssl
       destination: /etc/ssl