Tonis Tiigi c44f11e138 security: limit daemon file reads ...

Bound gateway reference and container reads before allocation. Apply the same
limit when loading nested LLB definitions.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit 03cfacc0c397eb8e5fe46df962df51131f667cb6)

2026-09-30 15:12:29 +02:00

..

config

Cleanup foreign-layers implementation

2022-02-10 01:12:42 +00:00

contenthash

update generated proto

2026-08-26 02:06:18 -07:00

metadata

metadata: set NoFreelistSync on bolt databases to avoid write amplification

2026-09-29 18:37:28 +02:00

remotecache

remotecache/s3: honor compression attributes

2026-09-23 16:06:46 +03:00

util

security: limit daemon file reads

2026-09-30 15:12:29 +02:00

blobs_linux_test.go

cache: serialize blob computation writers

2026-09-21 15:57:50 -07:00

blobs_linux.go

cache: serialize blob computation writers

2026-09-21 15:57:50 -07:00

blobs_nolinux.go

Upgrade to containerd 2

2025-01-13 16:42:48 -08:00

blobs_test.go

cache: serialize blob computation writers

2026-09-21 15:57:50 -07:00

blobs.go

cache: version and quarantine legacy layer snapshots

2026-09-30 15:12:29 +02:00

compression_nydus.go

Refactor error handling to use errors.New for consistency

2026-08-07 10:13:54 +02:00

filelist.go

lint: update some sorting code to newer generics based libs

2025-03-20 10:32:02 -07:00

manager_test.go

cache: version and quarantine legacy layer snapshots

2026-09-30 15:12:29 +02:00

manager.go

cache: version and quarantine legacy layer snapshots

2026-09-30 15:12:29 +02:00

metadata.go

cache: preserve stargz TOC snapshot identity

2026-09-30 15:12:23 +02:00

opts.go

golangci-lint: v2 upgrade

2025-05-02 12:19:17 -07:00

refs.go

cache: version and quarantine legacy layer snapshots

2026-09-30 15:12:29 +02:00

remote.go

[cache] Fix descriptor duplication in getAvailableBlobs

2025-08-11 16:33:55 +02:00