podman/pkg/machine
Brent Baude 5283f956a5 Disallow mounting to certain destination /dir paths
When certain directories, like /tmp, get mounted over, FCOS/Linux can
act in unexpected ways.  Added a sanity check for a list of directories
think might be impacted by this.  Also, moved the volume parsing earlier
in the init process so we can catch problems before the expensive
decompression of machine images.

The following destinations are forbidden for volumes:

`/bin`, `/boot`, `/dev`, `/etc`, `/home`, `/proc`, `/root`, `/run`, `/sbin`, `/sys`, `/tmp`, `/usr`, and `/var`. Subdirectories

Fixes: #18230

Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-03-07 09:54:01 -06:00
..
apple Make error messages more descriptive 2024-10-14 13:59:38 +01:00
applehv update golangci-lint to v1.62.0 2024-11-11 14:21:17 +01:00
compression update golangci/golangci-lint to v1.63.4 2025-01-07 15:48:53 +01:00
connection Update connection on removal 2024-09-24 15:46:02 -04:00
define fix new usetesting lint issue 2025-02-12 11:32:17 +01:00
e2e Disallow mounting to certain destination /dir paths 2025-03-07 09:54:01 -06:00
env pkg/machine: use fileutils.(Le|E)xists 2024-04-19 09:52:14 +02:00
hyperv Added escaping to invoked powershell command for hyperv stubber. 2024-10-16 13:16:39 +11:00
ignition Add `machine init --playbook` 2025-02-03 16:43:04 -05:00
libkrun update golangci-lint to v1.62.0 2024-11-11 14:21:17 +01:00
lock pkg/machine: make checkExclusiveActiveVM race free 2024-03-14 11:13:08 +01:00
ocipull Use UnparsedInstance.Manifest instead of ImageSource.GetManifest 2025-02-28 20:14:11 +01:00
os Refactor env dir and port functions into new leaf pkgs 2024-03-04 23:54:31 -06:00
ports Refactor env dir and port functions into new leaf pkgs 2024-03-04 23:54:31 -06:00
provider Move detection of libkrun and intel 2025-01-29 13:26:45 -06:00
proxyenv Quote systemd DefaultEnvironment Proxy values, as documented in systemd.conf man page: 2024-08-26 13:12:47 +02:00
qemu Fix compilation issues in QEMU machine files (Windows platform) 2024-11-27 17:23:08 +02:00
shim Disallow mounting to certain destination /dir paths 2025-03-07 09:54:01 -06:00
sockets Add utility to convert VMFile to URL for UNIX sockets 2024-07-23 16:41:24 +03:00
stdpull Clean machine pull cache 2024-04-26 12:31:42 -04:00
vmconfigs Add `machine init --playbook` 2025-02-03 16:43:04 -05:00
wsl Add `machine init --playbook` 2025-02-03 16:43:04 -05:00
cleanup.go Clean up gvproxy if machine start fails 2024-02-27 13:33:43 -06:00
config.go Move `DefaultMachineName` to `pkg/machine/define` 2024-09-24 15:36:14 -04:00
config_test.go Switch all calls of assert.Nil to assert.NoError 2025-01-15 07:08:27 -05:00
fedora_unix.go chore: delete obsolete // +build lines 2024-01-04 11:53:38 +02:00
fedora_windows.go Fix Lint on Windows and enable the job 2024-02-20 08:06:18 -05:00
gvproxy.go Ignore ERROR_SHARING_VIOLATION error on windows 2024-08-06 14:09:36 -05:00
gvproxy_unix.go Update module github.com/shirou/gopsutil to v4 2024-09-03 18:20:12 +02:00
gvproxy_windows.go Ignore ERROR_SHARING_VIOLATION error on windows 2024-08-06 14:09:36 -05:00
keys.go pkg/machine: Read stderr from ssh-keygen correctly 2024-08-12 14:09:16 -04:00
machine_common.go Move `DefaultMachineName` to `pkg/machine/define` 2024-09-24 15:36:14 -04:00
machine_unix.go Complete WSL implementation, refactor a few areas 2024-02-11 12:58:11 -06:00
machine_unsupported.go chore: delete obsolete // +build lines 2024-01-04 11:53:38 +02:00
machine_windows.go Safer use of `filepath.EvalSymlinks()` on Windows 2025-01-29 13:15:53 +01:00
machine_windows_test.go Safer use of `filepath.EvalSymlinks()` on Windows 2025-01-29 13:15:53 +01:00
pull.go Refactor env dir and port functions into new leaf pkgs 2024-03-04 23:54:31 -06:00
qemuprovider.go podman5 machine reconfig 1 2024-02-07 08:17:43 -06:00
ssh.go Introduce `podman machine cp` command 2025-02-28 09:56:46 -05:00
ssh_unix.go machine: implement http proxy logic for all providers 2024-02-22 11:23:45 +01:00
ssh_windows.go machine: implement http proxy logic for all providers 2024-02-22 11:23:45 +01:00
update.go Fix some comments 2024-04-13 15:20:19 +08:00
volumes.go machine/linux: Support virtiofs mounts (retain 9p default) 2024-06-07 10:03:06 -04:00