tree 3ec734c4b86fed54a5039623c789dd4b805b3b6e
parent 19eb0006edc79edc53fb53ea0eed67e93f4c8eba
author Lorenz Brun <lorenz@nexantic.com> 1611666050 +0100
committer Lorenz Brun <lorenz@nexantic.com> 1611666050 +0100

Make containerd work with read-only root

This makes containerd work with a read-only root. There were a few config mistakes on our side which
caused it to write to the rootfs (mostly leftovers from the switch to /ephemeral) and a semi-hardcoded path
in /var/lib/cni from containernetworking/cni. This is technically configurable, but it would require patching
three different repos (see diff message) and getting all of them to agree to take the change and wait for
it to propagate to all repos (containerd is known to be slow to release stuff). So let's just hack in
this one-line diff for the time being.

Test Plan: Should be covered by existing tests

X-Origin-Diff: phab/D694
GitOrigin-RevId: 0e8f5dbfb216539c16e64130af9fe1023722ae1b