lxd/device: Mount snapshot disks readonly

Signed-off-by: Wesley Hershberger <[email protected]>
canonical · Feb 6, 2025 · 52455e2 · 52455e2
1 parent 2d3ebe1
commit 52455e2
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lxd/device/disk.go b/lxd/device/disk.go
@@ -921,7 +921,7 @@ func (d *disk) startContainer() (*deviceConfig.RunConfig, error) {
 		}
 
 		options := []string{}
-		if isReadOnly {
+		if isReadOnly || d.config["snapshot"] != "" {
 			options = append(options, "ro")
 		}
 
@@ -1227,7 +1227,7 @@ func (d *disk) startVM() (*deviceConfig.RunConfig, error) {
 				mount.Opts = append(mount.Opts, d.detectVMPoolMountOpts()...)
 			}
 
-			if shared.IsTrue(d.config["readonly"]) {
+			if shared.IsTrue(d.config["readonly"]) || d.config["snapshot"] != "" {
 				mount.Opts = append(mount.Opts, "ro")
 			}