Skip to content

fix(cli): use a POSIX path probe in sandbox download - #5420

Merged
TaylorMutch merged 1 commit into
NVIDIA:mainfrom
ericcurtin:fix/4909-busybox-download-probe/ericcurtin
Nov 10, 2026
Merged

TaylorMutch merged 1 commit into
NVIDIA:mainfrom
ericcurtin:fix/4909-busybox-download-probe/ericcurtin

Conversation

@ericcurtin

Copy link
Copy Markdown
Contributor

Summary

sandbox download works on busybox images.

Related Issue

Closes #4909

Changes

  • Probe with [ -e ] and bare realpath instead of realpath -e --.
  • Prefix relative paths with ./ so leading dashes stay safe.
  • Symlinks are still resolved and re-checked against the workspace.

Testing

  • Checks appropriate to the affected code and behavior pass
  • Unit tests added/updated (if applicable)
  • E2E tests added/updated (if applicable)

Checklist

  • Follows Conventional Commits
  • Commits are signed off (DCO)
  • Architecture docs updated (if applicable)

Signed-off-by: Eric Curtin <eric.curtin@docker.com>
@ericcurtin

Copy link
Copy Markdown
Contributor Author

@TaylorMutch @elezar PTAL, and could one of you triage #4909 so the issue check can pass? Thank you!

@copy-pr-bot

copy-pr-bot Bot commented Nov 9, 2026

Copy link
Copy Markdown

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

@TaylorMutch TaylorMutch added the area:cli CLI-related work label Nov 10, 2026
@TaylorMutch

Copy link
Copy Markdown
Collaborator

/ok to test 44dd9cd

@TaylorMutch TaylorMutch added area:platform and removed area:cli CLI-related work labels Nov 10, 2026
@github-actions
github-actions Bot requested review from FrostGod and pimlock November 10, 2026 05:19

@TaylorMutch TaylorMutch left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed the path-probe change and verified that canonicalization and workspace-boundary validation remain intact. All three file-transfer conformance E2E tests passed locally on Alpine (BusyBox 1.37) and Ubuntu 24.04, using Docker bridge mode. Required CI checks pass for this commit.

@TaylorMutch
TaylorMutch added this pull request to the merge queue Nov 10, 2026
Merged via the queue into NVIDIA:main with commit 4a009c3 Nov 10, 2026
92 of 97 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

sandbox download fails on busybox-based images: ssh probe uses GNU-only 'realpath -e'

2 participants