diff options
author | Eelco Dolstra <eelco.dolstra@logicblox.com> | 2012-09-19T19·45-0400 |
---|---|---|
committer | Eelco Dolstra <eelco.dolstra@logicblox.com> | 2012-09-19T19·45-0400 |
commit | b9124a5c336fd231adaa548cf5be311731847848 (patch) | |
tree | 4512ebc47414036212e8b1e895147f6300124df4 /doc | |
parent | 76e88871b21c47c0216e160a5fb926f763ba64fe (diff) |
Support having /nix/store as a read-only bind mount
It turns out that the immutable bit doesn't work all that well. A better way is to make the entire Nix store a read-only bind mount, i.e. by doing $ mount --bind /nix/store /nix/store $ mount -o remount,ro,bind /nix/store (This would typically done in an early boot script, before anything from /nix/store is used.) Since Nix needs to be able to write to the Nix store, it now detects if /nix/store is a read-only bind mount and then makes it writable in a private mount namespace.
Diffstat (limited to 'doc')
0 files changed, 0 insertions, 0 deletions