https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=258709
--- Comment #1 from Oscar Carlsson <os...@spindel.tax> --- I tried setting up a Mono application in a iocage base jail (iocage -b ...) but noticed that my certificate store was empty, and that I couldn't use the cert-sync tool to sync with my system certificate store - the tool threw error messages that my file system was mounted as read only. I setup an nearly identical new jail, but made it a 'thick' jail instead (iocage -T ...) instead, and now my Mono certificate store was full of CAs (as expected). Running cert-sync again worked fine (although it was already in sync). So I suspect that cert-sync (and mozroots) tries to write to a folder that is mounted as read-only in a iocage base jail. This is a list of read-only folders on one such jail: /bin /boot /lib /libexec /rescue /sbin /usr/bin /usr/include /usr/lib /usr/libexec /usr/sbin /usr/share /usr/libdata /usr/lib32 I couldn't make either mozroots or cert-sync to be more verbose (as to which folder it was trying to write), but I _guess_ that it's /usr/lib or so. An acceptable workaround is to use a thick jail instead, but it would be _nice_ to have it working in a base jail as well. -- You are receiving this mail because: You are the assignee for the bug.