dissect: support mount options when going through mountfsd, requiring privileges via polkit (#39394)

RootImageOptions=/ExtensionImages=/MountImages= all support custom mount options, but mountfsd does not support it. Add varlink parameters to allow callers to specify mount options so that those directives can work as expected. Require additional privs via polkit.
2026-01-16 14:55:02 +00:00
parent 502d6f4bc9 3a8759e5d4
commit 3e2a5dc2e1
11 changed files with 199 additions and 9 deletions
@@ -2621,6 +2621,7 @@ int setup_namespace(const NamespaceParameters *p, char **reterr_path) {
                                r = mountfsd_mount_image(
                                                p->root_image,
                                                userns_fd,
+                                                p->root_image_options,
                                                p->root_image_policy,
                                                p->verity,
                                                dissect_image_flags,