From 7ace6fe0c391370cd12cfc6eab1a1477f7cc2a40 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marcus=20Sch=C3=A4fer?= Date: Wed, 11 Sep 2024 12:21:08 +0200 Subject: [PATCH] Fixed container sync options Do not exclude/filter any security/xattr capabilities. --- kiwi/oci_tools/umoci.py | 3 --- test/unit/oci_tools/umoci_test.py | 3 --- 2 files changed, 6 deletions(-) diff --git a/kiwi/oci_tools/umoci.py b/kiwi/oci_tools/umoci.py index 7f386cf0e99..a2fa363431e 100644 --- a/kiwi/oci_tools/umoci.py +++ b/kiwi/oci_tools/umoci.py @@ -137,9 +137,6 @@ def sync_rootfs(self, root_dir, exclude_list=None): os.sep.join([self.oci_root_dir, 'rootfs']), exclude_list=exclude_list, options=Defaults.get_sync_options() + [ - '--filter', '-x! user.*', - '--filter', '-x! security.ima*', - '--filter', '-x! security.capability*', '--delete' ] ) diff --git a/test/unit/oci_tools/umoci_test.py b/test/unit/oci_tools/umoci_test.py index e8820f53391..da4b5dbec55 100644 --- a/test/unit/oci_tools/umoci_test.py +++ b/test/unit/oci_tools/umoci_test.py @@ -60,9 +60,6 @@ def test_sync_rootfs(self, mock_sync): options=[ '--archive', '--hard-links', '--xattrs', '--acls', '--one-file-system', '--inplace', - '--filter', '-x! user.*', - '--filter', '-x! security.ima*', - '--filter', '-x! security.capability*', '--delete' ] )