frigate

0 Fork 0

mirror of https://github.com/blakeblackshear/frigate.git synced 2026-09-12 21:52:56 -04:00

Files

T

Josh Hawkins 40793b8478 Container security hardening (phase 2) (#24068 )

* Create frigate and go2rtc runtime users in the image

* Add single fix-ownership helper for volume permission migration

* Add init-usermod oneshot for PUID and PGID remapping

* Chown newly created runtime directories to the frigate user

* Run sentinel-guarded ownership sweep during prepare

* Add host-side volume permission migration script

* Guard log directory ownership for user-mode startup

* Fall back to plain s6-log when running without root

* Assert PUID remapping and sweep sentinel in CI smoke test

* Skip the ownership sweep in the devcontainer

* Pin FRIGATE_RUN_AS_ROOT in ownership tests

* Do not record the sweep as complete when a chown failed

* Validate PUID and PGID in the migration script

* Treat a failed ownership scan as an incomplete sweep

* Reject PUID and PGID of 0 during remapping

* Handle symlinks, dry runs, and sentinel write failures in the sweep

* Treat an absent sweep root as an incomplete sweep

2026-09-12 07:30:04 -06:00

hailo8l

Update hailo installation instructions and script (#21882 )

2026-02-05 06:38:34 -07:00

main

Container security hardening (phase 2) (#24068 )

2026-09-12 07:30:04 -06:00

memryx

update installation code to hold SDK 2.1 version (#20781 )

2025-11-03 13:23:51 -07:00

migration

Container security hardening (phase 2) (#24068 )