pub(crate) const REQUIRED_TOPLEVEL_TO_EMPTY_DIRS: &[&str];Expand description
These directories are required to exist in images. They may have content in the container, but we don’t want to expose them in the final merged root.
§/boot
This is how sealed UKIs are handled; the UKI in /boot has the composefs digest, so we can’t include it in the rendered image.
§/sysroot
See https://github.com/containers/composefs-rs/issues/164 Basically there is only content here in ostree-container cases, and us traversing there for SELinux labeling will cause problems. The ostree-container code special cases it in a different way, but here we can just ignore it.