termux/proot-distro v5.9.0

Version 5.9.0

on GitHub

Changes:

• login, run: export variables PD_CONTAINER=<name>, PD_IMAGE=<image-ref>, PD_IMAGE_ID=<sha256-digest> and container=proot-distro in sessions. Build gets same except PD_CONTAINER.
• pull: detect whether image config or manifest is shorter than Content-Length.
• build (ADD, COPY): placing directory over an existing regular file is now a refusal instead of a silent tree/layer mismatch.
• build (... --chmod): validate value as an octal between 0 and 07777.
• build: Dockerfile is read with 16 MiB limit.
• push: send the Bearer token on the upload PUT only when the Location URL belongs to the registry itself.
• Registry credentials are only sent to the origin they were addressed to.
• Do not carry Authorization header if host redirects from HTTPS to HTTP.
• A token endpoint realm must be https:// (http:// allowed under --allow-insecure). file://, ftp:// and data: realms are refused.
• Environment strings from image config are validated before exec (no NUL, encodable, under 128 KiB).
• The profile.d snippet is written for every session of a normal-type container, not only default-mode Termux logins.