(In reply to Thorsten Kukuk from comment #32) > > So whatever the solution will be, it has to work on a read-only root > filesystem. I'm fine to use the other solution but the main issue will remain and will need to be fixed the same way the day when SUSE will decide to make tmpfs the default for /tmp: everyone who don't use tmpfs will need to keep this setting once the default will be changed and the only solution I can see currently is to mask tmp.mount only *once*. And to implement that we need write access to /usr... OTOH if we're fine with the fact that some users will switch to tmpfs during an update then the problem is solved.