v1.1.3 - [2022-10-25]
- Prefer the
fakeroot-sysv
command over thefakeroot
command because the latter can be linked to eitherfakeroot-sysv
orfakeroot-tcp
, butfakeroot-sysv
is much faster. - Update the included
squashfuse_ll
to have-o uid=N
and-o gid=N
options and changed the corresponding image driver to use them when available. This makes files inside sif files appear to be owned by the user instead of by the nobody id 65534 when running in non-setuid mode. - Fix the locating of shared libraries when running
unsquashfs
from a non-standard location. - Properly clean up temporary files if
unsquashfs
fails. - Fix the creation of missing bind points when using image binding with underlay.
- Change the error when an overlay image is not writable into a warning that suggests adding
:ro
to make it read only or using--fakeroot
. - Avoid permission denied errors during unprivileged builds without
/etc/subuid
-based fakeroot when/var/lib/containers/sigstore
is readable only by root. - Avoid failures with
--writable-tmpfs
in non-setuid mode when using fuse-overlayfs versions 1.8 or greater by adding the fuse-overlayfsnoacl
mount option to disable support for POSIX Access Control Lists. - Fix the
--rocm
flag in combination with-c
/-C
by forwarding all/dri/render*
devices into the container.