Skip to content

jailer 0.5.1

Choose a tag to compare

View all tags
@grepjava grepjava released this 01 Nov 09:06
· 90 commits to main since this release
v0.5.1
0e25135

Tarballs for FreeBSD amd64 and aarch64, built on FreeBSD 15.1 and needing its libc, so for 15.1 and later; on 15.0, build from source or the port in ports/sysutils/jailer.

t=jailer-0.5.1-freebsd15-$(uname -p)
fetch https://github.com/grepjava/jailer/releases/download/v0.5.1/$t.tar.gz
tar xzf $t.tar.gz
install -s $t/bin/jailer /usr/local/bin/
install -m 444 $t/man/man1/jailer.1 /usr/local/share/man/man1/

Fixes

  • Links in COPY and RUN --mount=type=bind stay inside the root. A build runs as root on the host, and links on the way to a copy's source or destination were followed as the host sees them: a base image with a link to /etc could have a COPY write into the host's /etc, and COPY --from=<image> could read the host's files. Links are now followed as in a jail on that root: an absolute link starts from the image's (or the context's) root, and .. stops there. Cached layers and ADD archives were not affected; bsdtar already refuses to extract through links. Upgrade if you build from images you do not control.
  • build pulls a base image or a COPY --from image with its own registry's credentials; before, it used those saved for Docker Hub, so a private image on another registry did not pull.
  • ENV and LABEL keep quotes inside a quoted value: ENV A="\"x\"" sets "x".
  • init takes the app name from [package] in Cargo.toml only.

Full Changelog: v0.5.0...v0.5.1

Assets 4
Loading