container

lee/container

0 Fork 0

mirror of https://github.com/apple/container.git synced 2026-10-22 05:51:11 +00:00

Files

T

J Logan ca4884f8f3 Build context fix, bump to containerization 0.52.1. (#2415 )

- `BuildFSSync.read()` and `info()` resolved a 
  requested path, checked that the result was
  inside the build context, and then opened the
  original path. A symlink replaced between the
  check and the open was followed to its new
  target, which could be outside the context.
-This change opens each requested file by
  walking its path one component at a time from
  a directory descriptor pinned on the context
  root, using `FileDescriptorOps` from
  `containerization`. Symlinks are followed only
  when the target is relative and stays beneath
  the context root. The metadata and the content
  returned to the builder both come from the
  same open descriptor.
- Behavior change: a symlink with an absolute
  target is now rejected by `read()` and `info()`,
  even when the target is inside the context.
  Relative symlinks that stay inside the context
  still work. `walk()`-based transfers are unchanged.
- Dependency: Requires `containerization` 0.50.0
  for its `FileDescriptorOps` API enhancements.
  This change updates the library from 0.52.0
  to 0.52.1.

2026-10-19 14:14:06 -07:00

APIServer

[container]: add clean command (#1949 )

2026-09-01 11:32:31 -07:00

CAuditToken

Update license header on all files to include the current year (#1024 )

2026-01-05 13:09:34 -08:00

CLI

Remove AsyncParsableCommand conformance from ContainerCLI (#2140 )

2026-08-19 10:28:19 -07:00

ContainerBuild

Build context fix, bump to containerization 0.52.1. (#2415 )