Merge pull request #496 from Vaso73/feature/oci-home-resolution-hardening

fix(oci): harden runtime HOME resolution
This commit is contained in:
MacRimi
2026-10-17 20:55:56 +02:00
committed by GitHub
4 changed files with 295 additions and 8 deletions
+1 -1
View File
@@ -1099,7 +1099,7 @@ ensure_runtime_home() {
passwd_file="${rootfs}/etc/passwd"
mount_ct_rootfs
if ! home=$(python3 "$OCI_RUNTIME_RESOLVER" --home "$passwd_file" "$uid" 2>>"${OCI_LOG:-/dev/stderr}"); then
oci_quiet pct unmount "$VMID" || true
oci_quiet pct unmount "$VMID" || die "$(translate "Could not unmount the container filesystem")"
return 0
fi
oci_quiet pct unmount "$VMID" || die "$(translate "Could not unmount the container filesystem")"