From e1a6826f2d571770f9a6f5ba02fd2b0a4e42c235 Mon Sep 17 00:00:00 2001
From: Paul Buetow <paul@buetow.org>
Date: Mon, 25 May 2026 22:08:44 +0300
Subject: Add NFS sentinel initContainer to pkgrepo chart for 16

---
 f3s/pkgrepo/helm-chart/templates/deployment.yaml | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/f3s/pkgrepo/helm-chart/templates/deployment.yaml b/f3s/pkgrepo/helm-chart/templates/deployment.yaml
index 5e35c9a..4f01411 100644
--- a/f3s/pkgrepo/helm-chart/templates/deployment.yaml
+++ b/f3s/pkgrepo/helm-chart/templates/deployment.yaml
@@ -19,6 +19,23 @@ spec:
       labels:
         app: pkgrepo
     spec:
+      initContainers:
+      - name: nfs-check-pkgrepo
+        image: busybox:stable
+        command:
+        - sh
+        - -c
+        - |
+          test -f /mnt/.nfs-sentinel || (
+            echo "ERROR: NFS sentinel missing at /mnt/.nfs-sentinel"
+            echo "refusing to start; node likely has NFS unmounted"
+            echo "pod would otherwise bind-mount the local-XFS shadow"
+            exit 1
+          )
+        volumeMounts:
+        - name: pkgrepo-storage
+          mountPath: /mnt
+          readOnly: true
       containers:
       - name: nginx
         image: nginx:1.27-alpine
-- 
cgit v1.2.3