fix: skip read-only mounts in permission fixer and remove redundant ssh_keys manifest mount

- apply_mount_permissions now skips mounts with readonly=true to avoid
  'Read-only file system' warnings on post-start chown/chmod
- Removed the ssh_keys mount from the pi-agent manifest definition;
  instance-level SSH key mounting now handles this exclusively
- Added unit test for read-only mount skipping

Quality gates: pytest (15 passed)
This commit is contained in:
Alex Blank
2026-05-29 15:32:00 +02:00
parent de8c47c81c
commit b483a34517
4 changed files with 32 additions and 9 deletions
@@ -232,14 +232,6 @@ def upgrade() -> None:
"writable": True,
"owner": "user",
},
{
"name": "ssh_keys",
"target": "/home/user/.ssh",
"source_type": "ssh_key",
"mode": "0700",
"file_mode": "0600",
"readonly": True,
},
{
"name": "pi_state",
"target": "/tmp/.pi/agents",