k3os overlayFS host directory exposure through misconfigured mounts
k3os deploys a read-only root filesystem mounted through initramfs to safeguard base OS binaries from unintended writes. The overlayFS configuration option, when present in the k3os definition, permits administrators to designate specific directories as writable while preserving the immutability of the core root. This design prevents accidental host service