Merge pull request #2714 from bcressey/expose-efivars

expose efi variables to privileged host containers
bottlerocket-os · Jan 9, 2023 · 756f33c · 756f33c
2 parents 5efb66c + 63ac2fe
commit 756f33c
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/packages/systemd/systemd.spec b/packages/systemd/systemd.spec
@@ -129,7 +129,7 @@ CONFIGURE_OPTS=(
  -Dhibernate=false
  -Dldconfig=true
  -Dresolve=false
- -Defi=false
+ -Defi=true
  -Dtpm=false
  -Denvironment-d=false
  -Dbinfmt=false

diff --git a/sources/host-ctr/cmd/host-ctr/main.go b/sources/host-ctr/cmd/host-ctr/main.go
@@ -781,6 +781,12 @@ func withPrivilegedMounts() oci.SpecOpts {
 			Source:      "/usr/src/kernels",
 			Type:        "bind",
 		},
+		{
+			Options:     []string{"rbind"},
+			Destination: "/sys/firmware",
+			Source:      "/sys/firmware",
+			Type:        "bind",
+		},
 		{
 			Options:     []string{"rbind"},
 			Destination: "/sys/kernel/debug",