Skip to content

Add --read-only-path and --masked-path option to container run / create - #2069

Merged
jglogan merged 1 commit into
apple:mainfrom
adityaramani:security-path-flags
Aug 5, 2026
Merged

Add --read-only-path and --masked-path option to container run / create#2069
jglogan merged 1 commit into
apple:mainfrom
adityaramani:security-path-flags

Conversation

@adityaramani

@adityaramani adityaramani commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Closes #2041

Type of Change

  • Bug fix
  • New feature
  • Breaking change
  • Documentation update

Motivation and Context

The 1.2.0 release of container updated the underlying containerization dependency. This caused the default runtime service to mark a set of default paths as masked / readonly inside of the container. This change adds the option to override these paths if needed while creating a new container

Testing

  • Tested locally
  • Added/updated tests
  • Added/updated docs

@github-actions github-actions Bot added the documentation Improvements or additions to documentation label Aug 4, 2026
@github-actions

github-actions Bot commented Aug 5, 2026

Copy link
Copy Markdown

Code Coverage

Tier Line Coverage
Unit 24.42%
Integration 66.22%
Combined 75.63%

@jglogan
jglogan merged commit ddaf2ca into apple:main Aug 5, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug]: /proc/sys/net/ipv4/ip_forward is no longer writable (regression)

2 participants