[Suggestion] Mount a copy of essential host files a readwrite inside the container (podman)

[dprimon]

Is your feature request related to a problem? Please describe.
I'm trying to configure VPN on a archlinux container. I realized and have been told that this needs a rootful container to be accomplished. In practice I've installed wireguard-tools and openreolv inside the Archlinux container and in the end the VPN enabling command fails on /etc/resolv.conf being mounted readonly.
I got not luck in finding a way to bypass this restriction.
Using:
distrobox 1.8.1.2
podman 4.3.1
debian bookworm with backports (i.e.: kernel, etc...)

Describe the solution you'd like
Mount (possibly a copy of) host files readwrite inside the container.

Describe alternatives you've considered
I'm condering avoiding use of container; I still have much to learn on the matter. I would instead configure a full vm with VPN inside it.

Additional context
Based on a statement in a forum, I understand that that docker can manage mounting a copy of a host file as read write.

[dprimon]

I've been able to mount /etc/resolv.conf readwrite by adding a line in distrobox-init.

• it doesn't affect rootless containers (trying to modify such file in there results in an error);
• it works fine in rootful container. But changes on the file are reflected on the host; in this case I'd like the container to work on a disposable copy of /etc/resolv.conf.

[dottorblaster]

I think that rewriting the resolv.conf file in a disposable fashion will render the VPN pretty ineffective outside the container itself. Making the resolv.conf just "writable" from inside the distrobox is something that I wouldn't advice personally since it increases the attack surface of whatever you're trying to deploy this way, but it's a means to an end for sure.

I think distrobox assemble is what you're looking for, if you want to make your init scripts permanent.

https://github.com/89luca89/distrobox/blob/main/docs/usage/distrobox-assemble.md