Ensure config-drive is read-only

The /config-drive dir presented from the host OS should
be presented as read only to ensure that the instance
can write directly to the host OS filesystem.

Change-Id: I997ef68048fa0a77f9cb0b70c325b9b96c079e2f
Closes-Bug: 1675741
This commit is contained in:
James Page 2017-03-24 13:14:18 +00:00
parent 991b2bd550
commit c3f55e797e
1 changed files with 1 additions and 0 deletions

View File

@ -415,6 +415,7 @@ class LXDDriver(driver.ComputeDriver):
'path': '/config-drive',
'source': configdrive_path,
'type': 'disk',
'readonly': True,
}
}
profile.devices.update(config_drive)