dilim/containerd
1
0
Fork 0
mirror of https://github.com/containerd/containerd.git synced 2026-08-11 01:26:26 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
85b5418ef5a6adeac95c910bf8c33ae0fb7bbecb
containerd/pkg
History
Paulo Oliveira 85b5418ef5 fix(oci): handle absolute symlinks in rootfs user lookup 
Go 1.24 introduced stricter checks for os.DirFS (via os.Root), which causes failures when /etc/passwd or /etc/group are absolute symlinks pointing outside the mount root (common in NixOS).

This patch introduces a helper that detects absolute symlinks and resolves them relative to the rootfs before opening, preventing the 'path escapes from parent' error.

Fixes #12683

Signed-off-by: Paulo Oliveira <paulo.hco47@gmail.com>
2026-01-08 08:44:30 -03:00
..
apparmor
pkg/apparmor: clarify Godoc
2023-02-10 10:23:59 -07:00
archive
fix: QF1001: could apply De Morgan's law (staticcheck)
2025-06-18 14:16:41 +05:30
atomicfile
atomicfile: new package for atomic file writes
2023-06-02 16:56:33 -07:00
blockio
Move to use github.com/containerd/log
2023-09-22 07:53:23 -07:00
cap
lint: remove //nolint:dupword that are no longer needed
2023-02-16 03:50:23 +09:00
cdi
Move CDI device spec out of the OCI package
2025-01-13 21:59:59 -08:00
cio
pkg/cio: Close(): use errors.Join to return all errors
2025-09-03 09:55:56 +02:00
deprecation
cri: deprecate the enable_cdi config option.
2025-12-17 10:52:54 +02:00
dialer
Chore: Simplify some syscall error checks
2024-05-06 00:44:13 -07:00
display
pkg/display: use platforms.Format for platform display
2025-09-29 18:15:34 +03:00
epoch
Refactor: Removing inherently flaky and unused SourceDateEpochOrNow function.
2023-09-17 08:34:26 -07:00
fifosync
fifosync: cross-process synchronization
2024-09-05 12:48:28 -07:00
filters
use format string when using printf like commands
2024-08-14 17:04:53 +05:30
gc
avoid repeated calls in Tricolor gc
2024-08-26 23:35:24 -07:00
httpdbg
Allow streaming to client
2025-04-23 18:03:29 -07:00
identifiers
use lazyregexp to compile regexes on first use
2025-04-22 20:29:14 +02:00
imageverifier
fix: QF1012: Use of fmt.Fprintln(...)
2025-06-18 14:16:41 +05:30
ioutil
Clean up issues cited by usetesting package with golangci
2025-09-07 14:07:40 -07:00
kernelversion
Remove loop variable copies
2024-12-23 23:14:49 -07:00
labels
Switch to new errdefs package
2024-01-25 22:18:45 -08:00
namespaces
bump up ttrpc to use its MD.Clone
2024-12-30 04:01:17 +00:00
netns
chore: fix some function names in comment
2025-10-17 09:54:21 -07:00
oci
fix(oci): handle absolute symlinks in rootfs user lookup
2026-01-08 08:44:30 -03:00
oom
[improve] prevent oom watcher depend on shim pkg.
2025-02-25 22:06:15 +08:00
os
fix: Used nolint to ignore the static checks
2025-06-18 14:16:41 +05:30
progress
use lazyregexp to compile regexes on first use
2025-04-22 20:29:14 +02:00
protobuf
pkg/protobuf: fix typo in godoc
2024-10-26 14:18:53 +02:00
rdt
Move to use github.com/containerd/log
2023-09-22 07:53:23 -07:00
reference
use lazyregexp to compile regexes on first use
2025-04-22 20:29:14 +02:00
rootfs
Switch to new errdefs package
2024-01-25 22:18:45 -08:00
schedcore
…
seccomp
chore: use go fix to cleanup old +build buildtag
2022-12-29 14:25:14 +08:00
shim
fix: QF1012: Use of fmt.Fprintln(...)
2025-06-18 14:16:41 +05:30
shutdown
…
snapshotters
Remove loop variable copies
2024-12-23 23:14:49 -07:00
stdio
…
sys
pkg/sys: check SupportsPidFD first
2025-08-12 14:53:29 -04:00
testutil
testutil: avoid conflict with continuity/testutil
2024-10-28 11:58:28 +09:00
timeout
…
tracing
pkg/tracing: HTTPStatusCodeAttributes: remove use of deprecated SemConv const
2025-12-12 17:31:16 +01:00
ttrpcutil
Make api a Go sub-module
2024-05-02 11:03:00 -07:00