I’m using AlmaLinux 9.2, and I would like to have the rootfs mounted readonly. I have found two issues with NetworkManager, that appear to be unrelated.
I want to be able to edit these files, so I have put them on another partition, and made
/etc/NetworkManager a symlink to e.g.
/etc/NetworkManager/system-connections as a symlink to
/data/etc/NetworkManager/system-connections - it doesn’t appear to change my issue.) That works well as long as SELinux is
permissive. Once I make it
enforcing - NetworkManager refuses to follow the symlink. I have tried to set the selinux context, but still no luck.
At startup, NetworkManager will parse the system-connections files, and try to create create an
/etc/resolve.conf file for the DNS. If the rootfs is readonly, this will obviously fail. So I made
/etc/resolve.conf a symlink to
/data/etc/resolv.conf - but that doesn’t work either, as NetworkManager will try to create a temporary file in /etc/ and then try to rename it to
/etc/resolve.conf, which will fail.
Does anyone have any ideas of what to try next?