chore(core): fix run with ro rootfs (port to upstream from #1526) (#1576)

chore(core): fix run with ro rootfs (#1526)

- Fix /var/log/libvirt mount point in virt-launcher image to run it as node-labeller.
- Fix build for p11-kit: rewrite for submodule.

Signed-off-by: Ivan Mikheykin <[email protected]>

Author: diafour

images/packages/p11-kit/werf.inc.yaml

@@ -20,7 +20,21 @@ secrets:
   value: {{ $.SOURCE_REPO_GIT }}
 shell:
   install:
-  - git clone --depth=1 $(cat /run/secrets/SOURCE_REPO)/{{ $gitRepoUrl }} --branch {{ $version }} /src
+  - |
+    git clone --depth=1 $(cat /run/secrets/SOURCE_REPO)/{{ $gitRepoUrl }} --branch {{ $version }} /src
+
+    # Download subprojects/pkcs11-json
+    cd /src
+    if [[ "$(cat /run/secrets/SOURCE_REPO)" =~ "github.com" ]] ; then
+      echo "Checkout submodules"
+      git submodule update --init --recursive --depth=1
+    else
+      echo "Checkout submodules with URL rewrite"
+      git \
+        -c url."$(cat /run/secrets/SOURCE_REPO)/".insteadOf=https://github.com/  \
+        submodule update --init --recursive --depth=1
+    fi
+
 ---
 
 {{- $name := print $.ImageName "-dependencies" -}}

images/virt-launcher/mount-points.yaml

@@ -43,6 +43,6 @@ dirs:
   - /var/lib/libvirt/qemu/nvram
   - /var/lib/kubevirt-node-labeller
   - /var/lib/swtpm-localca
-  - /var/log
+  - /var/log/libvirt
   - /path # For hot-plugged disks, used in "hp Pods".
   - /init/usr/bin # For attaching images as "container disks".