#!/bin/bash
set -euo pipefail
install -d -m 0750 -o root -g fds /run/log/desktop /run/log/xserver /run/fds/x11
# Active XKB keymaps are session state; all global font caches are built in the image.
if [[ -d /var/lib/xkb ]] && ! mountpoint -q /var/lib/xkb; then
    mount -t tmpfs -o mode=0755,nosuid,nodev,noexec tmpfs /var/lib/xkb
fi