# Set up default root config to mount sysroot as read only
# See: https://github.com/fedora-iot/iot-distro/issues/81
# https://fedoraproject.org/wiki/Changes/Silverblue_Kinoite_readonly_sysroot

postprocess:
  - |
    #!/usr/bin/env bash
    set -xeuo pipefail

    install -dm 0755 -o 0 -g 0 /usr/lib/ostree
    cat >> /usr/lib/ostree/prepare-root.conf << 'EOF'
    [sysroot]
    readonly = true
    EOF