Skip to content

v1.2.2

Choose a tag to compare

View all tags
@nopoz nopoz released this 30 May 01:41
· 8 commits to main since this release
v1.2.2
f1eda63
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixes

Validate PORTAINER_BACKUP_UMASK and fail safe to 077

An unquoted PORTAINER_BACKUP_UMASK: 077 in a compose/YAML file is parsed as an octal integer (63 decimal) and reached the container as 63, which derived a world-readable 0604 for exported files (0714 for dirs) instead of the intended owner-only 0600/0700. The export path and the entrypoint reconcile now reject any value that is not 3-4 octal digits and fall back to 077 with a warning, so a mangled value fails safe instead of leaking.

Quoting remains the correct config: PORTAINER_BACKUP_UMASK: "077", PUID: "1000".

Docs

  • docker-compose.yml now shows the PORTAINER_BACKUP_UMASK / PUID / PGID vars as commented, quoted examples.
  • README documents file ownership/permissions and the YAML quoting rule for numeric values.

Full changelog: v1.2.1...v1.2.2

Assets 2
Loading