7432dfa749
Previously only unpack operations were supported with chroot. This adds chroot support for packing operations. This prevents potential breakouts when copying data from a container. Signed-off-by: Brian Goff <cpuguy83@gmail.com> (cherry picked from commit 3029e765e241ea2b5249868705dbf9095bc4d529) Signed-off-by: Sebastiaan van Stijn <github@gone.nl> Upstream-commit: 61e0459053c359e322b8d5c017e855f616fd34c0 Component: engine
30 lines
553 B
Go
30 lines
553 B
Go
// +build !windows
|
|
|
|
package chrootarchive // import "github.com/docker/docker/pkg/chrootarchive"
|
|
|
|
import (
|
|
"fmt"
|
|
"io"
|
|
"io/ioutil"
|
|
"os"
|
|
|
|
"github.com/docker/docker/pkg/reexec"
|
|
)
|
|
|
|
func init() {
|
|
reexec.Register("docker-applyLayer", applyLayer)
|
|
reexec.Register("docker-untar", untar)
|
|
reexec.Register("docker-tar", tar)
|
|
}
|
|
|
|
func fatal(err error) {
|
|
fmt.Fprint(os.Stderr, err)
|
|
os.Exit(1)
|
|
}
|
|
|
|
// flush consumes all the bytes from the reader discarding
|
|
// any errors
|
|
func flush(r io.Reader) (bytes int64, err error) {
|
|
return io.Copy(ioutil.Discard, r)
|
|
}
|