core: refuse to mount ExtensionImages if the base layer doesn't at least have ID...

We can't match an extension if we don't at least have an ID,
so refuse to continue

diff --git a/src/core/namespace.c b/src/core/namespace.c
index c549dcc96be4d19d0df6e9541da160dace34b401..ecbd23833c6d9308ed697fe3a45fb4eecec490d6 100644 (file)
--- a/src/core/namespace.c
+++ b/src/core/namespace.c
@@ -1151,6 +1151,8 @@ static int mount_image(const MountEntry *m, const char *root_directory) {
                                 NULL);
                 if (r < 0)
                         return log_debug_errno(r, "Failed to acquire 'os-release' data of OS tree '%s': %m", empty_to_root(root_directory));
+                if (isempty(host_os_release_id))
+                        return log_debug_errno(SYNTHETIC_ERRNO(EINVAL), "'ID' field not found or empty in 'os-release' data of OS tree '%s': %m", empty_to_root(root_directory));
         }
 
         r = verity_dissect_and_mount(