Affected by GO-2025-3781 and 20 other vulnerabilities

GO-2025-3781: Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks in github.com/lxc/incus

GO-2025-3782: Incus creates nftables rules that partially bypass security options in github.com/lxc/incus

GO-2025-4115: Incus vulnerable to local privilege escalation through custom storage volumes in github.com/lxc/incus

GO-2026-4357: Incus container image templating arbitrary host file read and write in github.com/lxc/incus

GO-2026-4359: Incus container environment configuration newline injection in github.com/lxc/incus

GO-2026-4879: Local Incus UI web server vulnerable to nuthentication bypass in github.com/lxc/incus

GO-2026-4881: Incus vulnerable to arbitrary file read and write through pongo templates in github.com/lxc/incus

GO-2026-4882: Incus does not verify combined fingerprint when downloading images from simplestreams servers in github.com/lxc/incus

GO-2026-4884: Incus has an abitrary file write through its systemd-creds options in github.com/lxc/incus

GO-2026-4885: Incus vulnerable to local privilege escalation through VM screenshot path in github.com/lxc/incus

GO-2026-4886: Incus vulnerable to denial of source through crafted bucket backup file in github.com/lxc/incus

GO-2026-5127: Incus Vulnerable to Panic via Snapshot Bounds Check in github.com/lxc/incus

GO-2026-5168: Incus has Unbounded YAML Metadata Decode via Parsing in github.com/lxc/incus

GO-2026-5252: Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted) in github.com/lxc/incus

GO-2026-5254: Incus has Blind SSRF via Image Import Preflight HEAD in github.com/lxc/incus

GO-2026-5280: Incus is affected by unbounded binary import disk exhaustion in github.com/lxc/incus

GO-2026-5319: Incus has an OVN TLS Verification that Accepts Peer-Supplied Roots in github.com/lxc/incus

GO-2026-5384: Incus has Nil-Pointer Dereference via S3 Bucket Import in github.com/lxc/incus

GO-2026-5397: Incus has a Nil-Pointer Dereference Panic via Bucket Metadata in github.com/lxc/incus

GO-2026-5612: Incus has a Nil-Pointer Dereference via Custom Volume Import in github.com/lxc/incus

GO-2026-5742: Incus has Nil Dereferences on Restore via Malformed YAML in github.com/lxc/incus

The highest tagged major version is v7.

instancewriter

package

v0.7.0 Latest Latest Go to latest Published: Mar 26, 2024 License: Apache-2.0 Imports: 10 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/lxc/incus

Links

Documentation ¶

Rendered for

Index ¶

type FileInfo
type InstanceTarWriter
- func NewInstanceTarWriter(writer io.Writer, idmapSet *idmap.Set) *InstanceTarWriter

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type FileInfo ¶

type FileInfo struct {
	FileName    string
	FileSize    int64
	FileMode    os.FileMode
	FileModTime time.Time
}

FileInfo static file implementation of os.FileInfo.

func (*FileInfo) IsDir ¶

func (f *FileInfo) IsDir() bool

IsDir is file a directory.

func (*FileInfo) ModTime ¶

func (f *FileInfo) ModTime() time.Time

ModTime of file.

func (*FileInfo) Mode ¶

func (f *FileInfo) Mode() os.FileMode

Mode of file.

func (*FileInfo) Name ¶

func (f *FileInfo) Name() string

Name of file.

func (*FileInfo) Size ¶

func (f *FileInfo) Size() int64

Size of file.

func (*FileInfo) Sys ¶

func (f *FileInfo) Sys() any

Sys returns further unix attributes for a file owned by root.

type InstanceTarWriter ¶

type InstanceTarWriter struct {
	// contains filtered or unexported fields
}

InstanceTarWriter provides a TarWriter implementation that handles ID shifting and hardlink tracking.

func NewInstanceTarWriter ¶

func NewInstanceTarWriter(writer io.Writer, idmapSet *idmap.Set) *InstanceTarWriter

NewInstanceTarWriter returns a ContainerTarWriter for the provided target Writer and id map.

func (*InstanceTarWriter) Close ¶

func (ctw *InstanceTarWriter) Close() error

Close finishes writing the tarball.

func (*InstanceTarWriter) ResetHardLinkMap ¶

func (ctw *InstanceTarWriter) ResetHardLinkMap()

ResetHardLinkMap resets the hard link map. Use when copying multiple instances (or snapshots) into a tarball. So that the hard link map doesn't work across different instances/snapshots.

func (*InstanceTarWriter) WriteFile ¶

func (ctw *InstanceTarWriter) WriteFile(name string, srcPath string, fi os.FileInfo, ignoreGrowth bool) error

WriteFile adds a file to the tarball with the specified name using the srcPath file as the contents of the file. The ignoreGrowth argument indicates whether to error if the srcPath file increases in size beyond the size in fi during the write. If false the write will return an error. If true, no error is returned, instead only the size specified in fi is written to the tarball. This can be used when you don't need a consistent copy of the file.

func (*InstanceTarWriter) WriteFileFromReader ¶

func (ctw *InstanceTarWriter) WriteFileFromReader(src io.Reader, fi os.FileInfo) error

WriteFileFromReader streams a file into the tarball using the src reader. A manually generated os.FileInfo should be supplied so that the tar header can be added before streaming starts.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL