fix failure to start container with networking enabled

Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>

Author: ndeloof

internal/shim/task/mount.go

@@ -242,6 +242,13 @@ func (bm *bindMounter) FromBundle(ctx context.Context, b *bundle.Bundle) error {
 			specSrc = path.Join(vmTarget, filepath.Base(m.Source))
 		}
 
+		// Resolve symlinks in the host path because libkrun opens it with
+		// O_NOFOLLOW, which rejects symlinks (e.g., /etc -> /private/etc on macOS).
+		hostSrc, err = filepath.EvalSymlinks(hostSrc)
+		if err != nil {
+			return fmt.Errorf("failed to resolve symlinks for bind mount source %s: %w", hostSrc, err)
+		}
+
 		transformed := bindMount{
 			tag:      tag,
 			hostSrc:  hostSrc,