[andrewrynhard]

This is correct. You could have a privileged pod that mounts up the host and you can do things from there but even then the OS is read only.