Restrict OCI bind-mount sources to configured directories and check the launch command username - #9010

Merged

rzo1 merged 3 commits into

worker-launcher-oci-mount-sources

Aug 24, 2026

Commits on Aug 24, 2026

Restrict OCI bind-mount sources to configured directories and check the launch command username

reiabreu
and
claude
committed
07ac4d5
Document the OCI allowed bind-mount source directories setting

reiabreu
and
claude
committed
4cd2ef6
Resolve OCI bind-mount sources with realpath before the allowed-directory check

reiabreu
and
claude
committed
25c09ee