portable: reject root directories without an ID field in os-release
    
    We always require at least ID to be set in os-release, reject
    and propagate error to the caller instead of asserting later