Tonis Tiigi 3f864e412f executor: reject proxy CA bundle devices ...

Read proxy CA bundles through RegularInRoot before accessing their contents.
Keep temporary writes and replacement confined to a retained root handle.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit 914ed29f24515cf7dbfeff1c169538123945437b)

2026-09-30 15:12:28 +02:00

..

containerdexecutor

executor: fail closed on proxy CA cleanup

2026-09-30 15:12:26 +02:00

oci

errors: report build-facing paths on read failure

2026-09-30 15:12:24 +02:00

resources

Update critical containerd and Docker deps

2026-07-21 17:29:37 -07:00

runcexecutor

executor: fail closed on proxy CA cleanup

2026-09-30 15:12:26 +02:00

containerid_test.go

executor: validate container IDs centrally

2026-03-25 08:14:29 -07:00

containerid.go

Refactor error handling to use errors.New for consistency

2026-08-07 10:13:54 +02:00

env_test.go

network: centralize proxy environment entries

2026-07-30 09:52:30 -04:00

env.go

proxy: support daemon upstream proxies

2026-08-25 23:42:29 -07:00

executor.go

proxy: support daemon upstream proxies

2026-08-25 23:42:29 -07:00

proxyca_linux_test.go

executor: reject proxy CA bundle devices

2026-09-30 15:12:28 +02:00

proxyca_linux.go

executor: reject proxy CA bundle devices

2026-09-30 15:12:28 +02:00

proxyca_unsupported.go

solver: add proxy network mode

2026-06-04 11:23:00 -07:00

stubs_test.go

executor: restore mount points removed for rootless

2026-08-13 16:04:16 +03:00

stubs.go

executor: restore mount points removed for rootless

2026-08-13 16:04:16 +03:00