From a839a31c9eb9fb3b539deaa708a326fee650a91b Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Mon, 11 Nov 2024 20:00:18 -0500
Subject: [PATCH] cmdlib: only do overlayfs check in privileged path

It's only in the privileged path where we're composing directly to the
filesystem that we care about whether we're on overlayfs or not. In the
unprivileged path, the compose happens on a real filesystem on the cache
qcow2 within supermin, so there's no need to restrict what filesystem
the workdir itself on the outside is sitting on.
---
 src/cmdlib.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/cmdlib.sh b/src/cmdlib.sh
index 3cbeb5fd87..e1d037d3e7 100755
--- a/src/cmdlib.sh
+++ b/src/cmdlib.sh
@@ -157,8 +157,8 @@ prepare_build() {
         fatal "No ${workdir}/builds found; did you run coreos-assembler init?"
     fi
 
-    if [ "$(stat -f --printf="%T" .)" = "overlayfs" ] && [ -z "${COSA_SKIP_OVERLAY:-}" ]; then
-        fatal "${workdir} must be a volume"
+    if has_privileges && [ "$(stat -f --printf="%T" .)" = "overlayfs" ] && [ -z "${COSA_SKIP_OVERLAY:-}" ]; then
+        fatal "${workdir} must be a volume when privileged"
     fi
 
     if test '!' -w "${workdir}"; then