Root volume protection in Incus VM

Incus
1

Happy to provide more detail but is a root volume treated specially from other custom volumes in an Incus 6.20 VM?

I’m failing to do these operations:

  1. Swap one root volume device for another (I’m currently achieving this via adding custom volumes and changing their boot priority to superscede the root volume)
  2. Shadow a root volume using a custom volume, to mount at / of a VM (attempting to hide the root volume device)
  3. Clone the root volume (VMSrcRoot) of VM VMSrc that’s currently stopped, attempting to attach it to a different VM VMCloner that also has another custom volume VMSrcRootClone attached to it, that mounts VMSrcRoot as read only and runs a dd from VMSrcRoot to VMSrcRootClone (incus simply refuses to attach VMSrcRoot to VMCloner saying VMSrcRoot doesn’t exist although incus storage volume shows it does)
  4. Obtain the location of the root volume (actually this seems to be the case for any volume Is it expected for Incus to not show the `location` of volumes?)

Again, if these are all expected to work out of box in Incus 6.20 and not error out, I’m likely making mistakes, let me know and I will follow up with the exact commands I’m using - just wanted to see if my expectations are correct

Now I’m using a OpenWRT VM to achieve all of this so if this detail matters or is relevant, let me know as well, but so far it feels like the protections are from directly from Incus

OpenWRT testing in Incus
2

I guess I need to show my attempts in #3 because I just read Create empty vm with two root disks for mirroring and it seems like it works for them?