Handle top level symlinks in relaxed sandbox

diff --git a/mkosi/run.py b/mkosi/run.py
index eb6ac101cefb887a6eca7cadc544ba95bcc117ff..42bc0c76cfcf3f41fc147f7f3ab3848adc457118 100644 (file)
--- a/mkosi/run.py
+++ b/mkosi/run.py
@@ -521,7 +521,10 @@ def sandbox_cmd(
                 Path("/lib32"),
                 Path("/lib64"),
             ):
-                cmdline += ["--bind", p, p]
+                if p.is_symlink():
+                    cmdline += ["--symlink", p.readlink(), p]
+                else:
+                    cmdline += ["--bind", p, p]
 
         if home := current_home_dir():
             cmdline += ["--bind", home, home]