mirror/podman
1
0
Fork 0
mirror of https://github.com/containers/podman.git synced 2026-07-13 00:31:45 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
6dd797844249b7ffa1b422fd0cd49f562e017772
podman/libpod
History
Aditya R 6ca857feb0 volume,container: chroot to source before exporting content 
* Utils must support higher level API to create Tar with chrooted into
  directory
* Volume export: use TarwithChroot instead of Tar so we can make sure no
  symlink can be exported by tar if it exists outside of the source
directory.
* container export: use chroot and Tar instead of Tar so we can make sure no
  symlink can be exported by tar if it exists outside of the mointPoint.

[NO NEW TESTS NEEDED]
[NO TESTS NEEDED]
Race needs combination of external/in-container mechanism which is hard to repro in CI.

Closes: BZ:#2168256
CVE: https://access.redhat.com/security/cve/CVE-2023-0778

Signed-off-by: Aditya R <arajan@redhat.com>
2023-02-16 19:25:38 +05:30
..
define
Add ulimit annotation to kube gen & play
2023-02-13 11:38:24 -05:00
driver
bump go module to version 4
2022-01-18 12:47:07 +01:00
events
Fix typos. Improve language.
2023-02-09 21:56:27 +01:00
layers
Initial checkin from CRI-O repo
2017-11-01 11:24:59 -04:00
linkmode
go fmt: use go 1.18 conditional-build syntax
2022-03-18 09:11:53 +01:00
lock
Fix typos. Improve language.
2023-02-09 21:56:27 +01:00
logs
Fix typos. Improve language.
2023-02-09 21:56:27 +01:00
plugin
bump golangci-lint to v1.49.0
2022-10-17 09:19:41 +02:00
shutdown
libpod: switch to golang native error wrapping
2022-07-05 16:06:32 +02:00
boltdb_state_internal.go
DB: make loading container states optional
2023-01-26 10:20:38 +01:00
boltdb_state_unsupported.go
libpod: Add definition of containerPlatformState for FreeBSD
2022-08-23 15:31:00 +01:00
boltdb_state.go
Fix typos
2023-02-11 18:23:24 +01:00
common_test.go
bump go module to version 4
2022-01-18 12:47:07 +01:00
container_api.go
Fix typos. Improve language.
2023-02-09 21:56:27 +01:00
container_commit.go
commit: use libimage code to parse changes
2023-01-16 16:28:11 +01:00
container_config.go
add support for limiting tmpfs size for systemd-specific mnts
2023-02-14 14:56:09 +05:30
container_copy_common.go
libpod: Implement 'podman cp' for FreeBSD
2022-09-20 08:36:23 +01:00
container_copy_freebsd.go
libpod: Implement 'podman cp' for FreeBSD
2022-09-20 08:36:23 +01:00
container_copy_linux.go
libpod: Move jointMountAndExec to container_copy_linux.go
2022-09-20 08:36:23 +01:00
container_copy_unsupported.go
libpod: Implement 'podman cp' for FreeBSD
2022-09-20 08:36:23 +01:00
container_exec.go
container rm: save once for exec removal and state change
2023-01-30 15:43:03 +01:00
container_freebsd.go
libpod: move NetNS into state db instead of extra bucket
2022-12-16 18:30:12 +01:00
container_graph_test.go
bump go module to version 4
2022-01-18 12:47:07 +01:00
container_graph.go
Introduce graph-based pod container removal
2022-09-14 13:44:48 -04:00
container_inspect_freebsd.go
libpod: Factor out platform-specfic code from generateInspectContainerHostConfig
2022-09-15 08:10:34 +01:00
container_inspect_linux.go
Correct output when inspecting containers created with --ipc
2023-01-24 12:18:39 -05:00
container_inspect.go
Fix typos. Improve language.
2023-02-09 21:56:27 +01:00
container_internal_common.go
Fix typos. Improve language.
2023-02-09 21:56:27 +01:00
container_internal_freebsd.go
libpod: move NetNS into state db instead of extra bucket
2022-12-16 18:30:12 +01:00
container_internal_linux_test.go
Fix a potential UID/GID collision in unit tests
2023-02-07 09:34:15 -05:00
container_internal_linux.go
add support for limiting tmpfs size for systemd-specific mnts
2023-02-14 14:56:09 +05:30
container_internal_test.go
libpod: support idmap for --rootfs
2023-02-02 22:35:00 +01:00
container_internal_unsupported.go
libpod: Add FreeBSD implementation of container internals
2022-09-05 10:12:12 +01:00
container_internal.go
volume,container: chroot to source before exporting content
2023-02-16 19:25:38 +05:30
container_linux.go
libpod: move NetNS into state db instead of extra bucket
2022-12-16 18:30:12 +01:00
container_log_linux.go
journald: podman logs only show logs for current user
2023-01-27 16:20:37 +01:00
container_log_unsupported.go
libpod: switch to golang native error wrapping
2022-07-05 16:06:32 +02:00
container_log.go
k8s-file: podman logs --until --follow exit after time
2023-01-06 15:19:23 +01:00
container_path_resolution_test.go
libpod: fix lookup for subpath in volumes
2022-09-14 17:09:04 +02:00
container_path_resolution.go
bump golangci-lint to v1.49.0
2022-10-17 09:19:41 +02:00
container_stat_common.go
Fix typos. Improve language.
2023-02-09 21:56:27 +01:00
container_stat_freebsd.go
libpod: Implement 'podman cp' for FreeBSD
2022-09-20 08:36:23 +01:00
container_stat_linux.go
libpod: Move part of (*Container).stat to container_stat_linux.go
2022-09-20 08:36:23 +01:00
container_stat_unsupported.go
libpod: Implement 'podman cp' for FreeBSD
2022-09-20 08:36:23 +01:00
container_top_freebsd.go
libpod: Add support for 'podman top' on FreeBSD
2022-10-17 16:43:53 +01:00
container_top_linux.go
Fix stutters
2022-09-10 07:52:00 -04:00
container_top_unsupported.go
libpod: Add support for 'podman top' on FreeBSD
2022-10-17 16:43:53 +01:00
container_unsupported.go
libpod: Add definition of containerPlatformState for FreeBSD
2022-08-23 15:31:00 +01:00
container_validate.go
libpod: remove CNI word were no longer applicable
2022-12-16 14:20:14 +01:00
container.go
Add container error message to ContainerState
2023-01-03 13:21:24 -05:00
diff.go
libpod: switch to golang native error wrapping
2022-07-05 16:06:32 +02:00
doc.go
document that using libpod package directly is not supported
2022-03-23 19:05:29 +01:00
events.go
container create: add inspect data to event
2022-11-29 10:40:24 +01:00
healthcheck_linux.go
health check: ignore dependencies of transient systemd units/timers
2022-12-08 15:01:57 +01:00
healthcheck_nosystemd_linux.go
disable healthchecks automatically on non systemd systems
2022-12-05 20:58:30 +01:00
healthcheck_unsupported.go
libpod: Track healthcheck API changes in healthcheck_unsupported.go
2022-12-02 16:41:21 +00:00
healthcheck.go
ps: query health check in batch mode
2023-01-25 11:24:18 +01:00
info_freebsd.go
Fix stutters
2022-09-10 07:52:00 -04:00
info_linux.go
Fix stutters
2022-09-10 07:52:00 -04:00
info_test.go
libpod: Make unit test for statToPercent Linux only
2022-11-13 10:56:15 +00:00
info_unsupported.go
libpod: Enable 'podman info' for FreeBSD
2022-08-24 10:55:52 +01:00
info.go
runtime: Handle the transient store options
2022-12-05 18:09:21 +01:00
kube.go
Don't set hostPort when generating a service
2023-02-14 11:00:28 -05:00
mounts_linux.go
go fmt: use go 1.18 conditional-build syntax
2022-03-18 09:11:53 +01:00
networking_common.go
podman: relay custom DNS servers to network stack
2023-01-22 12:48:49 +05:30
networking_freebsd.go
Fix typos. Improve language.
2023-02-09 21:56:27 +01:00
networking_linux_test.go
enable unparam linter
2022-04-25 13:23:20 +02:00
networking_linux.go
Fix typos. Improve language.
2023-02-09 21:56:27 +01:00
networking_machine.go
Replace deprecated ioutil
2022-09-20 15:34:27 -04:00
networking_pasta_linux.go
libpod: move NetNS into state db instead of extra bucket
2022-12-16 18:30:12 +01:00
networking_slirp4netns.go
Fix typos. Improve language.
2023-02-09 21:56:27 +01:00
networking_unsupported.go
Fix typos. Improve language.
2023-02-09 21:56:27 +01:00
oci_conmon_attach_common.go
bump golangci-lint to v1.49.0
2022-10-17 09:19:41 +02:00
oci_conmon_attach_freebsd.go
libpod: Build oci_conmon_common.go and oci_conmon_attach_common on FreeBSD
2022-08-18 08:07:30 +01:00
oci_conmon_attach_linux.go
libpod: Move openUnixSocket to oci_conmon_attach_linux.go
2022-08-18 08:05:42 +01:00
oci_conmon_common.go
waitPidStop: reduce sleep time to 10ms
2023-01-19 12:31:37 +01:00
oci_conmon_exec_common.go
Replace deprecated ioutil
2022-09-20 15:34:27 -04:00
oci_conmon_exec_freebsd.go
libpod: Factor out capabilites code from prepareProcessExec
2022-09-07 07:58:37 +01:00
oci_conmon_exec_linux.go
libpod: Factor out capabilites code from prepareProcessExec
2022-09-07 07:58:37 +01:00
oci_conmon_freebsd.go
libpod: Make sure writeConmonPipeData is called on FreeBSD
2022-08-29 13:04:04 +01:00
oci_conmon_linux.go
Add and use Container.LinuxResource() helper
2022-10-12 13:45:49 +02:00
oci_conmon_unsupported.go
libpod: Build oci_conmon_common.go and oci_conmon_attach_common on FreeBSD
2022-08-18 08:07:30 +01:00
oci_conmon.go
podman: add new cgroup mode split
2020-06-25 17:16:12 +02:00
oci_missing.go
implement podman update
2022-09-01 13:02:01 -04:00
oci_util.go
libpod: switch to golang native error wrapping
2022-07-05 16:06:32 +02:00
oci.go
bump golangci-lint to v1.49.0
2022-10-17 09:19:41 +02:00
options.go
add support for limiting tmpfs size for systemd-specific mnts
2023-02-14 14:56:09 +05:30
pod_api.go
Merge pull request #16818 from SoMuchForSubtlety/api-port-bindings
2022-12-15 20:19:53 -05:00
pod_internal_freebsd.go
libpod: Factor out cgroups handling from (*Pod).refresh
2022-10-07 08:26:10 +01:00
pod_internal_linux.go
libpod: Factor out cgroups handling from (*Pod).refresh
2022-10-07 08:26:10 +01:00
pod_internal.go
bump golangci-lint to v1.50.1
2022-12-15 13:39:56 +01:00
pod_status.go
bump go module to version 4
2022-01-18 12:47:07 +01:00
pod_top_linux.go
libpod/pod_top_linux.go: s/TODO/NOTE/
2022-05-25 12:30:19 +02:00
pod_top_unsupported.go
libpod: Add stubs for non-linux builds
2022-08-17 11:45:07 +01:00
pod.go
resource limits for pods
2022-07-21 14:50:01 -04:00
reset.go
Update c/storage after https://github.com/containers/storage/pull/1436
2022-12-01 16:05:13 +01:00
runtime_cstorage.go
Add support for 'image' volume driver
2022-09-22 13:07:40 -04:00
runtime_ctr_freebsd.go
libpod: Don't mount /dev/shm in containers on FreeBSD
2022-09-05 10:20:50 +01:00
runtime_ctr_linux.go
libpod: Don't mount /dev/shm in containers on FreeBSD
2022-09-05 10:20:50 +01:00
runtime_ctr.go
Fix typos. Improve language.
2023-02-09 21:56:27 +01:00
runtime_img.go
DB: make loading container states optional
2023-01-26 10:20:38 +01:00
runtime_migrate_unsupported.go
libpod: Add stubs for non-linux builds
2022-08-17 11:45:07 +01:00
runtime_migrate.go
DB: make loading container states optional
2023-01-26 10:20:38 +01:00
runtime_pod_common.go
libpod: Add support for 'podman pod' on FreeBSD
2022-10-07 08:27:27 +01:00
runtime_pod_freebsd.go
libpod: Add support for 'podman pod' on FreeBSD
2022-10-07 08:27:27 +01:00
runtime_pod_linux.go
libpod: Factor out cgroup validation from (*Runtime).NewPod
2022-10-07 08:27:27 +01:00
runtime_pod_unsupported.go
libpod: Add support for 'podman pod' on FreeBSD
2022-10-07 08:27:27 +01:00
runtime_pod.go
libpod/runtime: switch to golang native error wrapping
2022-07-04 15:39:00 +02:00
runtime_renumber.go
DB: make loading container states optional
2023-01-26 10:20:38 +01:00
runtime_test.go
libpod: Ensure that generated container names are random
2022-09-01 10:27:04 +01:00
runtime_volume_common.go
Add podman volume create --ignore
2022-10-24 17:30:31 +02:00
runtime_volume_unsupported.go
libpod: Add volume support for FreeBSD
2022-09-27 16:31:40 +01:00
runtime_volume.go
libpod/runtime: switch to golang native error wrapping
2022-07-04 15:39:00 +02:00
runtime_worker.go
work queue: simplify and use a wait group
2022-05-25 10:17:46 +02:00
runtime.go
Fix typos. Improve language.
2023-02-09 21:56:27 +01:00
service.go
service container: less verbose error logs
2023-01-12 14:09:23 +01:00
state_test.go
DB: make loading container states optional
2023-01-26 10:20:38 +01:00
state.go
DB: make loading container states optional
2023-01-26 10:20:38 +01:00
stats_common.go
libpod: Split out the common code from GetContainerStats
2022-09-14 08:29:26 +01:00
stats_freebsd.go
Fix swapped NetInput/-Output stats
2022-11-28 12:26:41 +01:00
stats_linux.go
Fix swapped NetInput/-Output stats
2022-11-28 12:26:41 +01:00
stats_unsupported.go
libpod: Add support for 'podman stats' on FreeBSD
2022-09-14 08:29:26 +01:00
storage.go
libpod: switch to golang native error wrapping
2022-07-05 16:06:32 +02:00
util_freebsd.go
libpod: Add support for 'podman pod' on FreeBSD
2022-10-07 08:27:27 +01:00
util_linux_test.go
Fix mismatch between log messages and behavior of libpod.LabelVolumePath.
2020-09-13 23:24:15 -04:00
util_linux.go
Fix stutters
2022-09-10 07:52:00 -04:00
util_test.go
bump go module to version 4
2022-01-18 12:47:07 +01:00
util_unsupported.go
libpod: Add volume support for FreeBSD
2022-09-27 16:31:40 +01:00
util.go
remove unmapped ports from inspect port bindings
2022-12-15 23:18:50 +01:00
volume_inspect.go
Add support for 'image' volume driver
2022-09-22 13:07:40 -04:00
volume_internal_common.go
libpod: Add volume support for FreeBSD
2022-09-27 16:31:40 +01:00
volume_internal_freebsd.go
libpod: Add volume support for FreeBSD
2022-09-27 16:31:40 +01:00
volume_internal_linux.go
libpod: Factor out usage of unix.MNT_DETACH from (*Volume).unmount
2022-09-27 16:31:40 +01:00
volume_internal_unsupported.go
libpod: Add volume support for FreeBSD
2022-09-27 16:31:40 +01:00
volume_internal.go
Add support for 'image' volume driver
2022-09-22 13:07:40 -04:00
volume.go
Merge pull request #16243 from alexlarsson/volume-create-ignore
2022-10-26 15:00:51 -04:00