harden manila mount options for compute-init

bertiethorpe · bertiethorpe · commit c66ade8ef193 · 2025-03-17T10:57:51.000Z
diff --git a/ansible/roles/compute_init/files/compute-init.yml b/ansible/roles/compute_init/files/compute-init.yml
@@ -47,6 +47,8 @@
       - noatime
       - _netdev # prevents mount blocking early boot before networking available
       - rw
+      - nodev
+      - nosuid
 
     basic_users_userdefaults:
       state: present
