Merge pull request #8259 from laurazard/readonly-overlay

Add `ReadonlyMounts` to make overlay mounts readonly
2023-03-17 22:34:38 -07:00
parent 63e45eb5d8 daa3a7665e
commit e2cb6b82d1
4 changed files with 202 additions and 1 deletions
--- a/diff/walking/differ.go
+++ b/diff/walking/differ.go
@@ -96,7 +96,7 @@ func (s *walkingDiff) Compare(ctx context.Context, lower, upper []mount.Mount, o

 	var ocidesc ocispec.Descriptor
 	if err := mount.WithTempMount(ctx, lower, func(lowerRoot string) error {
-		return mount.WithTempMount(ctx, upper, func(upperRoot string) error {
+		return mount.WithReadonlyTempMount(ctx, upper, func(upperRoot string) error {
 			var newReference bool
 			if config.Reference == "" {
 				newReference = true