Tone down `NO_CHROOT` power
The rootfs_fixup()
scripts run either in the ${CMAKE_CURRENT_BINARY_DIR}/rootfs/
or in the host root system /
. The latter is sometimes needed to access ${CMAKE_CURRENT_BINARY_DIR}/vardir/
and such. This is well more than required.
Instead, run the second kind of fixup in ${CMAKE_CURRENT_BINARY_DIR}
and let it be mindful about using /vardir
instead of /var
and prefix paths with rootfs
like in #!/rootfs/bin/ash
.