Cirrus: Temp. workaround VFS incompatible option

[cevich]

There are many integration tests using the VFS storage driver. A
recent update to the containers-common package in Fedora added a new
mount option metacopy=on as it enhances security. However, this option
is not compatible with the VFS storage driver, causing those tests to
fail.

Until a better solution is realized, workaround this problem by forcing
"nodev" as the only mount option on all platforms. Also add a visible
note to the output flagging the change.

Signed-off-by: Chris Evich cevich@redhat.com

[openshift-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: cevich
To fully approve this pull request, please assign additional approvers.
We suggest the following additional approver: giuseppe

If they are not already assigned, you can assign the PR to them by writing /assign @giuseppe in a comment when ready.

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[cevich]

@mheon @edsantiago PTAL

[rhatdan]

This is covering up a real bug.
#3240
Should fix the bug.

[cevich]

@rhatdan I chatted with @mheon and @edsantiago about this yesterday morning. I believe Matt opened a containers/storage issue covering a good idea that Ed had:

[Thursday, May 30, 2019] [2:00:41 PM EDT] so, this is probably stupid, but there's a [storage.options.thinpool] section, why can't there be [storage.options.vfs] and [storage.options.overlay] ?

Though your idea in #3240 could be a compromise. My intention here is only a temporary fix, to be reverted later. This problem is blocking us from moving up to testing with Fedora 30. We also risk mass-breakage in F29 should they pick up the latest containers-common package.

I'll leave it up to y'all to work out, no worries if we just close this PR in favor of another fix.

[cevich]

/hold

[cevich]

Ugg, more workarounds needed for podman-in-podman as well. I'll attempt that, and --force push on the off-chance we actually need this PR.