From: Daan De Meyer <daan.j.demeyer@gmail.com>
Date: Tue, 17 Sep 2024 18:54:37 +0000 (+0200)
Subject: Make entire /run available to gpg command
X-Git-Tag: v25~285^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=675bccb6f7622137997ed5fd1db39d2bb9f910fe;p=thirdparty%2Fmkosi.git

Make entire /run available to gpg command

gpg connects to various sockets in /run so let's make the entirety
of /run available to it.
---

diff --git a/mkosi/__init__.py b/mkosi/__init__.py
index 91ef1eb92..688c8de43 100644
--- a/mkosi/__init__.py
+++ b/mkosi/__init__.py
@@ -2032,12 +2032,9 @@ def calculate_signature(context: Context) -> None:
     options: list[PathString] = [
         "--bind", home, home,
         "--bind", context.staging, workdir(context.staging),
+        "--bind", "/run", "/run",
     ]
 
-    # gpg can communicate with smartcard readers via this socket so bind mount it in if it exists.
-    if (p := Path("/run/pcscd/pcscd.comm")).exists():
-        options += ["--bind", p, p]
-
     with (complete_step("Signing SHA256SUMS…")):
         run(
             cmdline,