From c232f057ae207757d12e94ee5cdba24933675a38 Mon Sep 17 00:00:00 2001
From: Paul Buetow <paul@buetow.org>
Date: Mon, 25 May 2026 22:06:59 +0300
Subject: Add NFS sentinel initContainer to registry chart for 46

---
 f3s/registry/helm-chart/templates/deployment.yaml | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/f3s/registry/helm-chart/templates/deployment.yaml b/f3s/registry/helm-chart/templates/deployment.yaml
index f7b055b..f78525d 100644
--- a/f3s/registry/helm-chart/templates/deployment.yaml
+++ b/f3s/registry/helm-chart/templates/deployment.yaml
@@ -19,6 +19,23 @@ spec:
       labels:
         app: docker-registry
     spec:
+      initContainers:
+      - name: nfs-check-registry
+        image: busybox:stable
+        command:
+        - sh
+        - -c
+        - |
+          test -f /mnt/.nfs-sentinel || (
+            echo "ERROR: NFS sentinel missing at /mnt/.nfs-sentinel"
+            echo "refusing to start; node likely has NFS unmounted"
+            echo "pod would otherwise bind-mount the local-XFS shadow"
+            exit 1
+          )
+        volumeMounts:
+        - name: registry-storage
+          mountPath: /mnt
+          readOnly: true
       containers:
       - name: registry
         image: registry:2
-- 
cgit v1.2.3