mwiegand 9985ecc56c chore(deploy): cleanup left4me-web hardening + docs for kernel overlayfs ... Drop MountFlags=shared (the assumption that it propagated fuse mounts to host was incorrect on systemd 257 with ProtectSystem+ReadWritePaths). Restore PrivateTmp=true (was dropped in 593611e for fuse propagation that did not work). Rewrite the comment block to describe the new model: mounts go through the left4me-overlay helper which nsenters into PID 1's mount namespace, so the unit's mount-ns layout is no longer load-bearing. Update the three user-facing READMEs (root, l4d2host, deploy) to drop fuse-overlayfs / fusermount3 prereqs and call out the kernel overlayfs mount path through the privileged helper. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-05-08 12:29:49 +02:00
..
local	chore(deploy): cleanup left4me-web hardening + docs for kernel overlayfs	2026-05-08 12:29:49 +02:00