feat: support container file mode

score-spec / score-compose

Reference implementation for docker-compose target platform support

https://score.dev/

Apache License 2.0

445 stars 40 forks source link

Closed astromechza closed 6 months ago

astromechza commented 6 months ago

Up until now we were ignoring the container file mode bits. This PR fixes that, we now allow the file mode to be set on the file as an octal number.

The restrictions are:

must always be readable by the owner (> 0400)
if the owner does not have write permissions, we enable read only on the bind mount itself
otherwise any other file mode that works is accepted.
cannot be > 0777