mirror of
https://github.com/kata-containers/kata-containers.git
synced 2026-07-14 22:06:46 +00:00
When handling a memory-based emptyDir, the runtime creates a tmpfs mount inside the guest VM. The previous implementation just supports mount options with only "rbind", which does not explicitly guarantee the desired mount propagation behavior. This commit hardens the mounting process by explicitly adding the `rprivate` and `rw` mount flags. Signed-off-by: Alex Lyn <alex.lyn@antgroup.com>