# The protected view of the instance socket tree (isolated-exec design
# §3.2): /run/carlos/.instances bound onto /run/carlos/instances with
# nosymfollow. See data-instances.mount for why a bind, why of a different
# directory, and why DefaultDependencies=no. Nothing is ever renamed into
# this tree, so the raw directory has no caller at all. /run is tmpfs, so
# the two directories come from the tmpfiles line every boot, which is why
# this is ordered after systemd-tmpfiles-setup.service.
[Unit]
Description=carlos instance sockets (bind, nosymfollow)
DefaultDependencies=no
After=systemd-tmpfiles-setup.service
Before=carlos-edge.service carlos-instance-control.service
Conflicts=umount.target
Before=umount.target

[Mount]
What=/run/carlos/.instances
Where=/run/carlos/instances
Type=none
Options=bind,nosymfollow,nosuid,nodev,noexec

[Install]
WantedBy=multi-user.target