I think i have quite a unique problem. I have to install Cisco Secure Client, it comes with its own install script, that installs it in ⁨`/opt/cisco/.... `⁩ I create a script module, and it installed it successful. Rebasing to the OS works fine, and I can execute it, now there is a problem. Cisco Secure Client downloads profiles, it wants to put it in ⁨`/opt/cisco/...`⁩ but since it's symlinked to ⁨`/usr/lib/opt/cisco`⁩ it can't write to it. How can i resolve this issue? Is there a different way to install programs like this?

message has been deleted

This may have to be something you install at run-time instead of build-time. Normally, ⁨`/opt`⁩ is symlinked to ⁨`/var/opt`⁩ which is completely ignored in the image since everything in ⁨`/var`⁩ is a local machine state, so we have a system at build-time that symlinks ⁨`/opt`⁩ to ⁨`/usr/lib/opt`⁩ and creates systemd tmpfile setups to symlink anything in ⁨`/usr/lib/opt`⁩ to ⁨`/var/opt`⁩ at runtime. It then sets ⁨`/opt`⁩ to symlink back to ⁨`/var/opt`⁩ at the end of each build so that ⁨`/opt`⁩ is writeable at run-time. This helps with browsers and other apps that are installed from the package manager that install into ⁨`/opt`⁩. Now at run-time, ⁨`/opt`⁩ is writable, so if the install script could be used at run-time to install the program there

If i understand it correctly, the user needs to install it at run-time. But this for example is a required program that needs to be installed on all systems, is there a way to execute the script at run-time then? Ignoring if a user exists or not

At that point, I think you would need to create a systemd unit to install it

Hmm, okay I will look into it. Thanks

Yeah dealing with ⁨`/opt`⁩ is a pain

I wish I could tell this piece of shit program to install somewhere else, but nooooo....

lol

Sorry ,I just hate dealing with Cisco

Oh I get it

So you somewhat get my pain 😄

Oh yeah

Oh man, that won't really work either. Since it has to install some things to folders that are read only now.

Oh that's gross

Yeeep

Next best thing would be to take that script and make changes to it to work for your situation

The only folder that has to be RW (as far as I know) is the profiles one, isn't there a way to map this differently?

Maybe make that a symlink to a directory that is writeable at run-time?

Hmm, actually good point. I'm gonna try, thanks