After thinking more about it, I'll go for the solution posted in comment #22. I think it's better because: 1. it's supposed to support all cases 2. masking tmp.mount is the official and documented way to disable tmpfs on /tmp 3. it will be easier and cleaner to switch the defaults to tmpfs in the future. I'll make the changes reach Factory first and see how it goes.