From 566a4bbbbf5a0600e77147422aa026ea27b08c74 Mon Sep 17 00:00:00 2001 From: Luca Boccassi Date: Tue, 14 Oct 2025 18:46:08 +0100 Subject: [PATCH] nspawn: enable verity sharing Just like RootImage=, ExtensionImages= etc, nspawn can make use of this to save a lot of time when starting containers that use an already open image, since the default was changed to disabled. Follow-up for 57d1ceffb3d98f69c2da511ed59a420a1cfa7e40 --- src/nspawn/nspawn.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/nspawn/nspawn.c b/src/nspawn/nspawn.c index ca5795aeb94..f157b53c296 100644 --- a/src/nspawn/nspawn.c +++ b/src/nspawn/nspawn.c @@ -3830,6 +3830,7 @@ static DissectImageFlags determine_dissect_image_flags(void) { DISSECT_IMAGE_PIN_PARTITION_DEVICES | (arg_read_only ? DISSECT_IMAGE_READ_ONLY : DISSECT_IMAGE_FSCK|DISSECT_IMAGE_GROWFS) | DISSECT_IMAGE_ALLOW_USERSPACE_VERITY | + DISSECT_IMAGE_VERITY_SHARE | (arg_console_mode == CONSOLE_INTERACTIVE && arg_ask_password ? DISSECT_IMAGE_ALLOW_INTERACTIVE_AUTH : 0) | ((arg_userns_ownership == USER_NAMESPACE_OWNERSHIP_FOREIGN) ? DISSECT_IMAGE_FOREIGN_UID : (arg_userns_ownership != USER_NAMESPACE_OWNERSHIP_AUTO) ? DISSECT_IMAGE_IDENTITY_UID : 0); -- 2.47.3