Simplify jail configuration

24 files changed, 147 insertions, 145 deletions

diff --git a/roles/jails/01_ingress/defaults/main.yml b/roles/jails/01_ingress/defaults/main.yml
index f5e848b..37840eb 100644
--- a/roles/jails/01_ingress/defaults/main.yml
+++ b/roles/jails/01_ingress/defaults/main.yml
@@ -1,12 +1,15 @@
 userland: "15.1-RELEASE"
 devfs_ruleset: 6
-no_default_route: true
 
 zfs:
-  - name: zroot/jails/volumes/ingress_letsencrypt
-    mountpoint: /usr/local/etc/letsencrypt
-  - name: zroot/jails/volumes/ingress_logs
-    mountpoint: /var/log/nginx
+  - name: ingress_letsencrypt
+  - name: ingress_logs
+
+nullfs:
+  - src: ingress_letsencrypt
+    dst: /usr/local/etc/letsencrypt
+  - src: ingress_logs
+    dst: /var/log/nginx
 
 ingress_routes:
   - { host: jan.systems, jail: homepage }
@@ -37,8 +40,6 @@ contact_email: jan@jantuomi.fi
 jail_conf_options:
   - "allow.raw_sockets"
 
-nullfs: []
-
 pkg:
   - pcre2
   - nginx
diff --git a/roles/jails/01_ingress/tasks/main.yml b/roles/jails/01_ingress/tasks/main.yml
index 6c8a30b..98b8d13 100644
--- a/roles/jails/01_ingress/tasks/main.yml
+++ b/roles/jails/01_ingress/tasks/main.yml
@@ -1,39 +1,3 @@
-- name: Set WAN hooks (test)
-  set_fact:
-    exec_prestart:
-      - "ifconfig epw{{ jail_num }}a destroy 2>/dev/null || true"
-      - "ifconfig epair{{ jail_num }}001 create"
-      - "ifconfig epair{{ jail_num }}001a name epw{{ jail_num }}a"
-      - "ifconfig epair{{ jail_num }}001b name epw{{ jail_num }}b"
-      - "ifconfig brlan0 addm epw{{ jail_num }}a"
-    exec_poststart:
-      - "ifconfig epw{{ jail_num }}b vnet {{ jail_name }}"
-      - "ifconfig epw{{ jail_num }}a up"
-      - "jexec {{ jail_name }} ifconfig epw{{ jail_num }}b up"
-      - "jexec {{ jail_name }} ifconfig epw{{ jail_num }}b inet {{ ingress_wan_static }}"
-      - "jexec {{ jail_name }} route add default {{ lan_ipv4_gateway }}"
-    exec_poststop:
-      - "ifconfig epw{{ jail_num }}a destroy 2>/dev/null || true"
-  when: not is_prod
-
-- name: Set WAN hooks (prod)
-  set_fact:
-    exec_prestart:
-      - "ifconfig epw{{ jail_num }}a destroy 2>/dev/null || true"
-      - "ifconfig epair{{ jail_num }}001 create"
-      - "ifconfig epair{{ jail_num }}001a name epw{{ jail_num }}a"
-      - "ifconfig epair{{ jail_num }}001b name epw{{ jail_num }}b"
-      - "ifconfig brwan0 addm epw{{ jail_num }}a"
-    exec_poststart:
-      - "ifconfig epw{{ jail_num }}b vnet {{ jail_name }}"
-      - "ifconfig epw{{ jail_num }}a up"
-      - "jexec {{ jail_name }} ifconfig epw{{ jail_num }}b up"
-      - "jexec {{ jail_name }} dhclient epw{{ jail_num }}b"
-      - "jexec {{ jail_name }} route add 10.6.210.0/24 {{ lan_ipv4_gateway }} || true"
-    exec_poststop:
-      - "ifconfig epw{{ jail_num }}a destroy 2>/dev/null || true"
-  when: is_prod
-
 - import_role:
     name: jail
     tasks_from: jail_setup
diff --git a/roles/jails/02_postgres/defaults/main.yml b/roles/jails/02_postgres/defaults/main.yml
index 77097b0..47c0e5d 100644
--- a/roles/jails/02_postgres/defaults/main.yml
+++ b/roles/jails/02_postgres/defaults/main.yml
@@ -2,12 +2,15 @@ userland: "15.1-RELEASE"
 devfs_ruleset: 5
 
 zfs:
-  - name: zroot/jails/volumes/postgres_data
-    mountpoint: /var/db/postgres
+  - name: postgres_data
     owner: "770"
     group: "770"
     mode: "0755"
 
+nullfs:
+  - src: postgres_data
+    dst: /var/db/postgres
+
 jail_conf_options:
   - "allow.raw_sockets"
   - "allow.sysvipc"
diff --git a/roles/jails/03_irc_thelounge/defaults/main.yml b/roles/jails/03_irc_thelounge/defaults/main.yml
index cc29940..e9bfef2 100644
--- a/roles/jails/03_irc_thelounge/defaults/main.yml
+++ b/roles/jails/03_irc_thelounge/defaults/main.yml
@@ -1,8 +1,11 @@
 userland: "15.1-RELEASE"
 
 zfs:
-  - name: zroot/jails/volumes/irc_thelounge
-    mountpoint: /var/db/thelounge
+  - name: irc_thelounge
+
+nullfs:
+  - src: irc_thelounge
+    dst: /var/db/thelounge
 
 pkg_custom:
   - thelounge
diff --git a/roles/jails/04_taulubot/defaults/main.yml b/roles/jails/04_taulubot/defaults/main.yml
index 1c3f946..7bbb32d 100644
--- a/roles/jails/04_taulubot/defaults/main.yml
+++ b/roles/jails/04_taulubot/defaults/main.yml
@@ -1,8 +1,11 @@
 userland: "15.1-RELEASE"
 
 zfs:
-  - name: zroot/jails/volumes/taulubot
-    mountpoint: /usr/local/taulubot/photos
+  - name: taulubot
+
+nullfs:
+  - src: taulubot
+    dst: /usr/local/taulubot/photos
 
 pkg_custom:
   - taulubot
diff --git a/roles/jails/05_homepage/defaults/main.yml b/roles/jails/05_homepage/defaults/main.yml
index 99c74e5..cb53bd7 100644
--- a/roles/jails/05_homepage/defaults/main.yml
+++ b/roles/jails/05_homepage/defaults/main.yml
@@ -1,17 +1,20 @@
 userland: "15.1-RELEASE"
 
 zfs:
-  - name: zroot/jails/volumes/homepage_www
-    mountpoint: /var/www
-  - name: zroot/jails/volumes/homepage_agate_tls
-    mountpoint: /usr/local/etc/agate/tls
-    owner: "80"
+  - name: homepage_www
+  - name: homepage_agate_tls
+    owner: "80" # www
     group: "80"
-  - name: zroot/jails/volumes/homepage_gemini
-    mountpoint: /var/gemini
+  - name: homepage_gemini
 
 nullfs:
-  - src: /usr/local/jails/containers/ingress/usr/local/etc/letsencrypt
+  - src: homepage_www
+    dst: /var/www
+  - src: homepage_agate_tls
+    dst: /usr/local/etc/agate/tls
+  - src: homepage_gemini
+    dst: /var/gemini
+  - src: ingress_letsencrypt
     dst: /mnt/letsencrypt
     mode: ro
 
diff --git a/roles/jails/06_hommabot/defaults/main.yml b/roles/jails/06_hommabot/defaults/main.yml
index 997ee86..7e9ffb4 100644
--- a/roles/jails/06_hommabot/defaults/main.yml
+++ b/roles/jails/06_hommabot/defaults/main.yml
@@ -1,8 +1,11 @@
 userland: "15.1-RELEASE"
 
 zfs:
-  - name: zroot/jails/volumes/hommabot_data
-    mountpoint: /var/db/hommabot
+  - name: hommabot_data
+
+nullfs:
+  - src: hommabot_data
+    dst: /var/db/hommabot
 
 pkg_custom:
   - hommabot
diff --git a/roles/jails/07_aggro/defaults/main.yml b/roles/jails/07_aggro/defaults/main.yml
index 0077cf3..2904331 100644
--- a/roles/jails/07_aggro/defaults/main.yml
+++ b/roles/jails/07_aggro/defaults/main.yml
@@ -1,8 +1,11 @@
 userland: "15.1-RELEASE"
 
 zfs:
-  - name: zroot/jails/volumes/aggro_data
-    mountpoint: /var/db/aggro
+  - name: aggro_data
+
+nullfs:
+  - src: aggro_data
+    dst: /var/db/aggro
 
 pkg_custom:
   - aggro
diff --git a/roles/jails/08_diddle/defaults/main.yml b/roles/jails/08_diddle/defaults/main.yml
index 090340b..7b1b0e6 100644
--- a/roles/jails/08_diddle/defaults/main.yml
+++ b/roles/jails/08_diddle/defaults/main.yml
@@ -1,8 +1,11 @@
 userland: "15.1-RELEASE"
 
 zfs:
-  - name: zroot/jails/volumes/diddle_data
-    mountpoint: /var/db/diddle
+  - name: diddle_data
+
+nullfs:
+  - src: diddle_data
+    dst: /var/db/diddle
 
 pkg_custom:
   - diddle
diff --git a/roles/jails/09_redis/defaults/main.yml b/roles/jails/09_redis/defaults/main.yml
index 75df5f8..1acc74a 100644
--- a/roles/jails/09_redis/defaults/main.yml
+++ b/roles/jails/09_redis/defaults/main.yml
@@ -1,12 +1,15 @@
 userland: "15.1-RELEASE"
 
 zfs:
-  - name: zroot/jails/volumes/valkey_data
-    mountpoint: /var/db/valkey
+  - name: valkey_data
     owner: "537"
     group: "537"
     mode: "0755"
 
+nullfs:
+  - src: valkey_data
+    dst: /var/db/valkey
+
 pkg:
   - valkey
 
diff --git a/roles/jails/10_samba/defaults/main.yml b/roles/jails/10_samba/defaults/main.yml
index 4416022..9900117 100644
--- a/roles/jails/10_samba/defaults/main.yml
+++ b/roles/jails/10_samba/defaults/main.yml
@@ -1,10 +1,15 @@
 userland: "15.1-RELEASE"
 
+jail_conf_options:
+  - "allow.mount"
+  - "allow.mount.fdescfs"
+  - "enforce_statfs = 1"
+
 pkg:
   - samba419
 
 nullfs:
-  - src: /usr/local/jails/volumes/storage
+  - src: storage
     dst: /mnt/storage
 
 services:
diff --git a/roles/jails/11_spliit/defaults/main.yml b/roles/jails/11_spliit/defaults/main.yml
index 7ce40cd..77a318e 100644
--- a/roles/jails/11_spliit/defaults/main.yml
+++ b/roles/jails/11_spliit/defaults/main.yml
@@ -1,8 +1,11 @@
 userland: "15.1-RELEASE"
 
 zfs:
-  - name: zroot/jails/volumes/spliit_data
-    mountpoint: /var/db/expense-tracker
+  - name: spliit_data
+
+nullfs:
+  - src: spliit_data
+    dst: /var/db/expense-tracker
 
 pkg_custom:
   - expense-tracker
diff --git a/roles/jails/12_goaccess/defaults/main.yml b/roles/jails/12_goaccess/defaults/main.yml
index 98a2e43..5d9ef54 100644
--- a/roles/jails/12_goaccess/defaults/main.yml
+++ b/roles/jails/12_goaccess/defaults/main.yml
@@ -1,11 +1,12 @@
 userland: "15.1-RELEASE"
 
 zfs:
-  - name: zroot/jails/volumes/goaccess_data
-    mountpoint: /var/db/goaccess
+  - name: goaccess_data
 
 nullfs:
-  - src: /usr/local/jails/containers/ingress/var/log/nginx
+  - src: goaccess_data
+    dst: /var/db/goaccess
+  - src: ingress_logs
     dst: /mnt/nginx_logs
 
 pkg:
diff --git a/roles/jails/13_plex/defaults/main.yml b/roles/jails/13_plex/defaults/main.yml
index 4ae644c..1a9f31b 100644
--- a/roles/jails/13_plex/defaults/main.yml
+++ b/roles/jails/13_plex/defaults/main.yml
@@ -1,14 +1,15 @@
 userland: "15.1-RELEASE"
 
 zfs:
-  - name: zroot/jails/volumes/plex_data
-    mountpoint: /usr/local/plexdata
+  - name: plex_data
     owner: 972
     group: 972
     mode: 755
 
 nullfs:
-  - src: /usr/local/jails/volumes/storage/media
+  - src: plex_data
+    dst: /usr/local/plexdata
+  - src: storage/media
     dst: /mnt/media
 
 pkg_custom:
diff --git a/roles/jails/14_freshrss/defaults/main.yml b/roles/jails/14_freshrss/defaults/main.yml
index e421c88..2de31c7 100644
--- a/roles/jails/14_freshrss/defaults/main.yml
+++ b/roles/jails/14_freshrss/defaults/main.yml
@@ -1,11 +1,14 @@
 userland: "15.1-RELEASE"
 
 zfs:
-  - name: zroot/jails/volumes/freshrss_data
-    mountpoint: /var/db/freshrss
+  - name: freshrss_data
     owner: "80"
     group: "80"
 
+nullfs:
+  - src: freshrss_data
+    dst: /var/db/freshrss
+
 pkg:
   - nginx
 
diff --git a/roles/jails/15_paste/defaults/main.yml b/roles/jails/15_paste/defaults/main.yml
index d32f815..a2da2cd 100644
--- a/roles/jails/15_paste/defaults/main.yml
+++ b/roles/jails/15_paste/defaults/main.yml
@@ -1,8 +1,11 @@
 userland: "15.1-RELEASE"
 
 zfs:
-  - name: zroot/jails/volumes/paste_data
-    mountpoint: /var/db/pastebin
+  - name: paste_data
+
+nullfs:
+  - src: paste_data
+    dst: /var/db/pastebin
 
 pkg_custom:
   - pastebin
diff --git a/roles/jails/16_dl/defaults/main.yml b/roles/jails/16_dl/defaults/main.yml
index c6ae55d..fef93a1 100644
--- a/roles/jails/16_dl/defaults/main.yml
+++ b/roles/jails/16_dl/defaults/main.yml
@@ -5,28 +5,32 @@ jail_conf_options:
   - "allow.raw_sockets"
   - "allow.mlock"
 
-nullfs:
-  - src: /usr/local/jails/volumes/storage
-    dst: /mnt/storage
-
 zfs:
-  - name: zroot/jails/volumes/dl_sonarr
-    mountpoint: /usr/local/sonarr
+  - name: dl_sonarr
     owner: 351
     group: 351
-  - name: zroot/jails/volumes/dl_radarr
-    mountpoint: /usr/local/radarr
+  - name: dl_radarr
     owner: 352
     group: 352
-  - name: zroot/jails/volumes/dl_lidarr
-    mountpoint: /usr/local/lidarr
+  - name: dl_lidarr
     owner: 356
     group: 356
-  - name: zroot/jails/volumes/dl_prowlarr
-    mountpoint: /usr/local/prowlarr
+  - name: dl_prowlarr
     owner: 359
     group: 359
 
+nullfs:
+  - src: storage
+    dst: /mnt/storage
+  - src: dl_sonarr
+    dst: /usr/local/sonarr
+  - src: dl_radarr
+    dst: /usr/local/radarr
+  - src: dl_lidarr
+    dst: /usr/local/lidarr
+  - src: dl_prowlarr
+    dst: /usr/local/prowlarr
+
 pkg:
   - transmission-daemon
   - transmission-web
diff --git a/roles/jails/17_syncthing/defaults/main.yml b/roles/jails/17_syncthing/defaults/main.yml
index b60c952..9e1f3f1 100644
--- a/roles/jails/17_syncthing/defaults/main.yml
+++ b/roles/jails/17_syncthing/defaults/main.yml
@@ -1,21 +1,24 @@
 userland: "15.1-RELEASE"
 
 nullfs:
-  - src: /usr/local/jails/volumes/storage/docs
+  - src: storage/docs
     dst: /mnt/docs
-  - src: /usr/local/jails/volumes/storage/vault
+  - src: storage/vault
     dst: /mnt/vault
-  - src: /usr/local/jails/volumes/storage/jan-systems-2025-content
+  - src: storage/jan-systems-2025-content
     dst: /mnt/jan-systems-2025-content
-  - src: /usr/local/jails/volumes/storage/projects-ableton
+  - src: storage/projects-ableton
     dst: /mnt/projects-ableton
 
 zfs:
-  - name: zroot/jails/volumes/syncthing_config
-    mountpoint: /usr/local/etc/syncthing
+  - name: syncthing_config
     owner: "1001"
     group: "1001"
 
+nullfs:
+  - src: syncthing_config
+    dst: /usr/local/etc/syncthing
+
 pkg:
   - syncthing
 
diff --git a/roles/jails/18_komga/defaults/main.yml b/roles/jails/18_komga/defaults/main.yml
index 3010e4f..39b958d 100644
--- a/roles/jails/18_komga/defaults/main.yml
+++ b/roles/jails/18_komga/defaults/main.yml
@@ -1,11 +1,12 @@
 userland: "15.1-RELEASE"
 
 zfs:
-  - name: zroot/jails/volumes/komga_data
-    mountpoint: /var/db/komga
+  - name: komga_data
 
 nullfs:
-  - src: /usr/local/jails/volumes/storage/media/manga
+  - src: komga_data
+    dst: /var/db/komga
+  - src: storage/media/manga
     dst: /mnt/manga
 
 pkg:
diff --git a/roles/jails/19_leolalla_fi/defaults/main.yml b/roles/jails/19_leolalla_fi/defaults/main.yml
index a9157e2..0e1b449 100644
--- a/roles/jails/19_leolalla_fi/defaults/main.yml
+++ b/roles/jails/19_leolalla_fi/defaults/main.yml
@@ -1,8 +1,11 @@
 userland: "15.1-RELEASE"
 
 zfs:
-  - name: zroot/jails/volumes/leolalla_fi_data
-    mountpoint: /var/db/gdrive-photo-gallery
+  - name: leolalla_fi_data
+
+nullfs:
+  - src: leolalla_fi_data
+    dst: /var/db/gdrive-photo-gallery
 
 pkg_custom:
   - gdrive-photo-gallery
diff --git a/roles/jails/19_leolalla_fi/tasks/main.yml b/roles/jails/19_leolalla_fi/tasks/main.yml
index 021b2cf..6cb6177 100644
--- a/roles/jails/19_leolalla_fi/tasks/main.yml
+++ b/roles/jails/19_leolalla_fi/tasks/main.yml
@@ -11,14 +11,6 @@
     mode: "0600"
   no_log: true
 
-- name: Deploy wrapper script
-  template:
-    src: "{{ jail_role_dir }}/templates/usr_local_bin_gdrive_photo_gallery"
-    dest: /usr/local/bin/gdrive-photo-gallery
-    owner: root
-    group: wheel
-    mode: "0755"
-
 - import_role:
     name: jail
     tasks_from: jail_launch
diff --git a/roles/jails/20_immich/defaults/main.yml b/roles/jails/20_immich/defaults/main.yml
index b3347d3..6cb9390 100644
--- a/roles/jails/20_immich/defaults/main.yml
+++ b/roles/jails/20_immich/defaults/main.yml
@@ -8,22 +8,22 @@ oci_images:
   - name: immich-server
     image: "ghcr.io/immich-app/immich-server:{{ immich_version }}"
     check_path: /usr/src/app/server/dist/main.js
-    mounts:
-      - { type: nullfs, src: /immich_data, dst: /data }
   - name: immich-ml
     image: "ghcr.io/immich-app/immich-machine-learning:{{ immich_version }}"
     check_path: /opt/venv/bin/python
-    mounts:
-      - { type: nullfs, src: /model_cache, dst: /cache }
 
 zfs:
-  - name: zroot/jails/volumes/immich_data
-    mountpoint: /immich_data
+  - name: immich_data
     mode: "0755"
-  - name: zroot/jails/volumes/immich_model_cache
-    mountpoint: /model_cache
+  - name: immich_model_cache
     mode: "0755"
 
+nullfs:
+  - src: immich_data
+    dst: /image/immich-server/data
+  - src: immich_model_cache
+    dst: /image/immich-server/cache
+
 pkg:
   - skopeo
 
diff --git a/roles/jails/20_immich/tasks/main.yml b/roles/jails/20_immich/tasks/main.yml
index 835cd50..39decd1 100644
--- a/roles/jails/20_immich/tasks/main.yml
+++ b/roles/jails/20_immich/tasks/main.yml
@@ -46,28 +46,29 @@
     label: "{{ item.item.name }}"
   when: not item.stat.exists
 
-# Create mount points in each rootfs
-- name: Create base mount points in image rootfs
+- name: Create volume mount points in image rootfs
   file:
-    path: "/image/{{ item[0].name }}/{{ item[1] }}"
+    path: "/image/{{ item[0].name }}{{ item[1].dst }}"
     state: directory
     owner: root
     group: wheel
     mode: "0755"
-  loop: "{{ oci_images | product(['proc', 'sys', 'dev', 'tmp', 'run']) | list }}"
+  loop: "{{ oci_images | product(nullfs | default([]) | normalize_nullfs) | list }}"
   loop_control:
-    label: "{{ item[0].name }}/{{ item[1] }}"
+    label: "{{ item[0].name }}:{{ item[1].dst }}"
+  when: "item[1].dst.startswith('/image/' + item[0].name)"
 
-- name: Create nullfs mount points in image rootfs
+# Create mount points in each rootfs
+- name: Create base mount points in image rootfs
   file:
-    path: "/image/{{ item.0.name }}{{ item.1.dst }}"
+    path: "/image/{{ item[0].name }}/{{ item[1] }}"
     state: directory
     owner: root
     group: wheel
     mode: "0755"
-  loop: "{{ oci_images | subelements('mounts', skip_missing=True) }}"
+  loop: "{{ oci_images | product(['proc', 'sys', 'dev', 'tmp', 'run']) | list }}"
   loop_control:
-    label: "{{ item.0.name }}:{{ item.1.dst }}"
+    label: "{{ item[0].name }}/{{ item[1] }}"
 
 # Deploy resolv.conf into each rootfs
 - name: Deploy resolv.conf into image rootfs
diff --git a/roles/jails/20_immich/templates/jail.conf.j2 b/roles/jails/20_immich/templates/jail.conf.j2
index 13680af..8e3c626 100644
--- a/roles/jails/20_immich/templates/jail.conf.j2
+++ b/roles/jails/20_immich/templates/jail.conf.j2
@@ -13,26 +13,22 @@ immich {
   enforce_statfs = 1;
 
   devfs_ruleset = 4;
-  host.hostname = "immich";
-  path = "/usr/local/jails/containers/immich";
+  host.hostname = "${name}";
+  path = "/usr/local/jails/containers/${name}";
 
   exec.start = "/bin/sh /etc/rc";
   exec.stop  = "/bin/sh /etc/rc.shutdown";
 
-  # LAN epair
-  exec.prestart  += "ifconfig epl{{ jail_num }}a destroy 2>/dev/null || true";
-  exec.prestart  += "ifconfig epair{{ jail_num }}000 create";
-  exec.prestart  += "ifconfig epair{{ jail_num }}000a name epl{{ jail_num }}a";
-  exec.prestart  += "ifconfig epair{{ jail_num }}000b name epl{{ jail_num }}b";
-  exec.prestart  += "ifconfig epl{{ jail_num }}b ether random";
-  exec.prestart  += "ifconfig brlan0 addm epl{{ jail_num }}a";
-  exec.poststart += "ifconfig epl{{ jail_num }}b vnet immich";
-  exec.poststart += "ifconfig epl{{ jail_num }}a up";
-  exec.poststart += "jexec immich ifconfig epl{{ jail_num }}b up";
-  exec.poststart += "jexec immich ifconfig epl{{ jail_num }}b {{ jail_lan_cidr | ipv4_nth_cidr(jail_num | int + jail_lan_offset | int) }}";
-  exec.poststart += "jexec immich route delete default || true";
-  exec.poststart += "jexec immich route add default {{ ingress_ip }} || true";
-  exec.poststop  += "ifconfig epl{{ jail_num }}a destroy 2>/dev/null || true";
+  # Networking
+  exec.prestart  += "jail_net prestart  {{ jail_num }} ${name}";
+  exec.poststart += "jail_net poststart {{ jail_num }} ${name}";
+  exec.prestop   += "jail_net prestop   {{ jail_num }} ${name}";
+  exec.poststop  += "jail_net poststop  {{ jail_num }} ${name}";
+
+  # nullfs mounts
+{% for mount in nullfs | default([]) | normalize_nullfs %}
+  mount += "{{ mount.src }}  ${path}{{ mount.dst }}  nullfs  {{ mount.mode | default('rw') }}  0  0";
+{% endfor %}
 {% for img in oci_images %}
 
   # Mounts for {{ img.name }} rootfs
@@ -41,8 +37,5 @@ immich {
   mount += "devfs     $path/image/{{ img.name }}/dev   devfs     rw 0 0";
   mount += "tmpfs     $path/image/{{ img.name }}/tmp   tmpfs     rw 0 0";
   mount += "tmpfs     $path/image/{{ img.name }}/run   tmpfs     rw 0 0";
-{% for mnt in img.mounts | default([]) %}
-  mount += "$path{{ mnt.src }}  $path/image/{{ img.name }}{{ mnt.dst }}  nullfs rw 0 0";
-{% endfor %}
 {% endfor %}
 }