From d5c8638de5d399adb725ed495547ff01030248fd Mon Sep 17 00:00:00 2001
From: veilor <veilor@localhost>
Date: Thu, 30 Apr 2026 04:14:28 +0100
Subject: [PATCH] =?UTF-8?q?build:=20bind=20/dev=20+=20disable=20selinux=20?=
 =?UTF-8?q?relabel=20=E2=80=94=20losetup=20needs=20host=20loop=20devices?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 build/build-iso.sh | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/build/build-iso.sh b/build/build-iso.sh
index c9279fc..cb3c564 100755
--- a/build/build-iso.sh
+++ b/build/build-iso.sh
@@ -25,8 +25,10 @@ podman build -t veilor-build:latest "$REPO_ROOT/build"
 # ── Build ISO ──
 # --make-iso requires --privileged (loop devices, mount).
 podman run --rm --privileged \
-    -v "$REPO_ROOT:/work:Z" \
-    -v "$OUT_DIR:/out:Z" \
+    --security-opt label=disable \
+    -v /dev:/dev \
+    -v "$REPO_ROOT:/work" \
+    -v "$OUT_DIR:/out" \
     veilor-build:latest -c "
         set -e
         rm -rf /out/build-${DATE} /tmp/lmc