chore: drop rexec in pid 1 namespace for zpool-import

We can now drop the rexec of `zpool-importer` in PID 1 namesapce since
Talos now allows setting rootfs mount propagation.

Signed-off-by: Noel Georgi <[email protected]>

go.work

@@ -5,5 +5,4 @@ use (
 	./nvidia-gpu/nvidia-container-toolkit/nvidia-container-runtime-wrapper
 	./nvidia-gpu/nvidia-container-toolkit/nvidia-persistenced-wrapper
 	./storage/iscsi-tools/iscsid-wrapper
-	./storage/zfs/zpool-importer
 )

storage/zfs/manifest.yaml

@@ -7,4 +7,4 @@ metadata:
     This system extension provides kernel module driver for ZFS built against a specific Talos version.
   compatibility:
     talos:
-      version: ">= v1.5.0"
+      version: ">= v1.6.0"

storage/zfs/pkg.yaml

@@ -9,7 +9,6 @@ dependencies:
   - stage: libtirpc-zfs
   - stage: zlib-zfs
   - stage: zfs-tools
-  - stage: zpool-import-wrapper
 steps:
   - prepare:
       - |

storage/zfs/zpool-importer.yaml

@@ -4,7 +4,12 @@ depends:
   - service: cri
   - path: /dev/zfs
 container:
-  entrypoint: /usr/local/sbin/zpool-importer
+  security:
+    rootfsPropagation: shared
+  entrypoint: /usr/local/sbin/zpool
+  args:
+    - import
+    - -fa
   mounts:
     # ld-musl-x86_64.so.1
     - source: /lib
@@ -20,17 +25,37 @@ container:
       options:
         - bind
         - ro
+    - source: /usr/local/lib
+      destination: /usr/local/lib
+      type: bind
+      options:
+        - bind
+        - ro
     - source: /usr/local/sbin
       destination: /usr/local/sbin
       type: bind
       options:
         - bind
         - ro
+    - source: /dev
+      destination: /dev
+      type: bind
+      options:
+        - rshared
+        - rbind
+        - rw
     - source: /proc
       destination: /proc
       type: bind
       options:
         - rshared
         - rbind
         - rw
+    - source: /var
+      destination: /var
+      type: bind
+      options:
+        - rshared
+        - rbind
+        - rw
 restart: untilSuccess