erabo/spiegel_podman
1
0
Fork 0
mirror of https://github.com/podman-container-tools/podman.git synced 2026-10-19 04:17:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
spiegel_podman/pkg
History
Brent Baude 5283f956a5 Disallow mounting to certain destination /dir paths 
When certain directories, like /tmp, get mounted over, FCOS/Linux can
act in unexpected ways.  Added a sanity check for a list of directories
think might be impacted by this.  Also, moved the volume parsing earlier
in the init process so we can catch problems before the expensive
decompression of machine images.

The following destinations are forbidden for volumes:

`/bin`, `/boot`, `/dev`, `/etc`, `/home`, `/proc`, `/root`, `/run`, `/sbin`, `/sys`, `/tmp`, `/usr`, and `/var`. Subdirectories

Fixes: #18230

Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-03-07 09:54:01 -06:00
..
annotations update golangci-lint to 1.60.1 2024-08-19 11:41:28 +02:00
api Add stopped status for HealthCheck 2025-03-03 17:09:30 +01:00
auth update golangci/golangci-lint to v1.63.4 2025-01-07 15:48:53 +01:00
autoupdate Vendor c/common:8483ef6022b4 2024-08-30 16:13:54 +02:00
bindings fix: reduce logs noise when attach input on ExecStartAndAttach 2025-02-17 14:52:01 -03:00
channel bump golangci-lint to v1.50.1 2022-12-15 13:39:56 +01:00
checkpoint Enable pod restore with crun 2024-10-21 17:37:20 +01:00
copy Bump Go module to v5 2024-02-08 09:35:39 -05:00
criu chore: delete obsolete // +build lines 2024-01-04 11:53:38 +02:00
ctime update golangci/golangci-lint to v1.63.4 2025-01-07 15:48:53 +01:00
domain quadlet kube: correctly mark unit as failed 2025-03-05 15:53:55 +01:00
emulation chore: delete obsolete // +build lines 2024-01-04 11:53:38 +02:00
env update golangci/golangci-lint to v1.63.4 2025-01-07 15:48:53 +01:00
errorhandling bump go to 1.22 2024-09-03 15:14:15 +02:00
farm bump go to 1.22 2024-09-03 15:14:15 +02:00
fileserver Bump Go module to v5 2024-02-08 09:35:39 -05:00
inspect Bump Go module to v5 2024-02-08 09:35:39 -05:00
k8s.io Add kube play support for image volume source 2024-09-10 12:37:06 +00:00
libartifact Use UnparsedInstance.Manifest instead of ImageSource.GetManifest 2025-02-28 20:14:11 +01:00
lookup Cease using deprecated runc userlookup 2024-02-02 11:02:43 -05:00
machine Disallow mounting to certain destination /dir paths 2025-03-07 09:54:01 -06:00
namespaces namespaces: allow configuring keep-id userns size 2025-01-08 10:08:29 +01:00
parallel Bump Go module to v5 2024-02-08 09:35:39 -05:00
ps Ignore missing containers when calling GetExternalContainerLists 2024-08-05 08:18:57 -04:00
rctl Replace strings.SplitN with strings.Cut 2024-01-11 13:50:15 +00:00
rootless rootless: fix hang on s390x 2025-02-06 13:49:53 +01:00
seccomp pkg: switch to golang native error wrapping 2022-07-08 08:54:47 +02:00
selinux Fix SELinux functions names to not be repetitive 2020-04-23 15:57:34 -04:00
signal refacto: unknown signal return signal number without prefix 2024-02-28 19:45:03 +01:00
specgen Introduce podman machine cp command 2025-02-28 09:56:46 -05:00
specgenutil do not set the CreateCommand for API users 2025-01-22 19:13:08 +01:00
specgenutilexternal Quadlet container mount - support non key=val options 2023-09-27 16:20:00 +03:00
syncmap Add syncmap package and use it for graph stop/remove 2025-02-17 14:32:34 -05:00
systemd quadlet: support Memory= in [Container] sections 2025-02-17 17:29:15 +01:00
terminal Fix Lint on Windows and enable the job 2024-02-20 08:06:18 -05:00
timetype Replace strings.SplitN with strings.Cut 2024-01-11 13:50:15 +00:00
trust pkg/trust: use fileutils.(Le|E)xists 2024-04-19 09:52:14 +02:00
util pkg/util: remove redundant min/max helper functions 2025-03-06 21:39:36 +08:00