DBUS API required for GNOI Containerz.StartContainer#182

Merged

hdwhdw merged 19 commits intosonic-net:masterfrom hdwhdw:start_container

Dec 16, 2024

+255-65

Commits on Dec 11, 2024

DBUS Services required for GNOI Containerz StartContainer.

hdwhdw
authored and
daweihuang
committed
Add a placeholder function that prevent arbitrary request to run any container.

hdwhdw
authored and
daweihuang
committed
Update to only allow running known images.

hdwhdw
authored and
daweihuang
committed
Rewrite image validation so it get recognized by semgrep.

hdwhdw
authored and
daweihuang
committed
Rewrite command validation so it get recognize by semgrep.

hdwhdw
authored and
daweihuang
committed
maybe semgrep will recognize inline function

hdwhdw
authored and
daweihuang
committed
semgrep only allow hardcoded image name. We need to bypass it.

hdwhdw
authored and
daweihuang
committed
add documentation.

hdwhdw
authored and
daweihuang
committed
documentation need to be before nosemgrep

hdwhdw
authored and
daweihuang
committed
Add allowed_image_name and use it to verify the run function.

hdwhdw
authored and
daweihuang
committed
address copilot comment.

hdwhdw
authored and
daweihuang
committed
address comment and reformat.

hdwhdw
authored and
daweihuang
committed
increase test coverage and address comment.

hdwhdw
authored and
daweihuang
committed

Commits on Dec 12, 2024

Seperate allowed images and allowed containers.
hdwhdw
committed

Commits on Dec 13, 2024