Fix base tree tar archive unpacking

diff --git a/mkosi/__init__.py b/mkosi/__init__.py
index 8c172739676fc61431d559909761257e329d0bbb..72ca3ba48f77174788f8627c40360494dffaed21 100644 (file)
--- a/mkosi/__init__.py
+++ b/mkosi/__init__.py
@@ -108,7 +108,7 @@ def mount_base_trees(context: Context) -> Iterator[None]:
                 extract_tar(
                     path, d,
                     tools=context.config.tools(),
-                    sandbox=context.sandbox(options=["--bind", d, d]),
+                    sandbox=context.sandbox(options=["--ro-bind", path, path, "--bind", d.parent, d.parent]),
                 )
                 bases += [d]
             elif path.suffix == ".raw":