Fix bind mounting resolv.conf when it's a symlink

bwrap doesn't support mounting over symlinks, so let's take that
into account.

diff --git a/mkosi/run.py b/mkosi/run.py
index bcae2b650149256c25f77dd88ad565fa81132027..5ac230e368d81642e16fd6a6aa26ae71a83600dc 100644 (file)
--- a/mkosi/run.py
+++ b/mkosi/run.py
@@ -4,6 +4,7 @@ import multiprocessing
 import os
 import pwd
 import shlex
+import shutil
 import signal
 import subprocess
 import sys
@@ -300,7 +301,14 @@ def run_workspace_command(
         *bwrap_params,
     ]
 
+    resolve = state.root.joinpath("etc/resolv.conf")
+
     if network:
+        # Bubblewrap does not mount over symlinks and /etc/resolv.conf might be a symlink. Deal with this by
+        # temporarily moving the file somewhere else.
+        if resolve.is_symlink():
+            shutil.copy2(resolve, state.workspace / "resolv.conf", follow_symlinks=False)
+
         # If we're using the host network namespace, use the same resolver
         cmdline += ["--ro-bind", "/etc/resolv.conf", "/etc/resolv.conf"]
     else:
@@ -323,3 +331,6 @@ def run_workspace_command(
         if "run" in ARG_DEBUG:
             run([*cmdline, template.format("sh")], check=False, env=env)
         die(f"\"{shlex.join(str(s) for s in cmd)}\" returned non-zero exit code {e.returncode}.")
+    finally:
+        if state.workspace.joinpath("resolv.conf").exists():
+            shutil.copy2(state.workspace.joinpath("resolv.conf"), resolve, follow_symlinks=False)