From 8ca4780daaafc9e04d3ce34d9d2110954601150f Mon Sep 17 00:00:00 2001 From: Bitnami Bot Date: Wed, 27 May 2026 17:04:28 +0200 Subject: [PATCH] [bitnami/argo-cd] Release 3.4.2-debian-12-r6 (#94030) Signed-off-by: Bitnami Bot --- bitnami/argo-cd/3.4/debian-12/Dockerfile | 8 +++---- ....4.2-0-linux-amd64-debian-12.tar.gz.sha256 | 1 - ....4.2-0-linux-arm64-debian-12.tar.gz.sha256 | 1 - ....4.2-1-linux-amd64-debian-12.tar.gz.sha256 | 1 + ....4.2-1-linux-arm64-debian-12.tar.gz.sha256 | 1 + ....2.0-0-linux-amd64-debian-12.tar.gz.sha256 | 1 - ....2.0-0-linux-arm64-debian-12.tar.gz.sha256 | 1 - ....2.0-1-linux-amd64-debian-12.tar.gz.sha256 | 1 + ....2.0-1-linux-arm64-debian-12.tar.gz.sha256 | 1 + .../prebuildfs/opt/bitnami/scripts/libfs.sh | 24 ++++++++++++++----- 10 files changed, 26 insertions(+), 14 deletions(-) delete mode 100644 bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/argo-cd-3.4.2-0-linux-amd64-debian-12.tar.gz.sha256 delete mode 100644 bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/argo-cd-3.4.2-0-linux-arm64-debian-12.tar.gz.sha256 create mode 100644 bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/argo-cd-3.4.2-1-linux-amd64-debian-12.tar.gz.sha256 create mode 100644 bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/argo-cd-3.4.2-1-linux-arm64-debian-12.tar.gz.sha256 delete mode 100644 bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/helm-4.2.0-0-linux-amd64-debian-12.tar.gz.sha256 delete mode 100644 bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/helm-4.2.0-0-linux-arm64-debian-12.tar.gz.sha256 create mode 100644 bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/helm-4.2.0-1-linux-amd64-debian-12.tar.gz.sha256 create mode 100644 bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/helm-4.2.0-1-linux-arm64-debian-12.tar.gz.sha256 diff --git a/bitnami/argo-cd/3.4/debian-12/Dockerfile b/bitnami/argo-cd/3.4/debian-12/Dockerfile index 7468484158f0..22b538e9df5d 100644 --- a/bitnami/argo-cd/3.4/debian-12/Dockerfile +++ b/bitnami/argo-cd/3.4/debian-12/Dockerfile @@ -7,7 +7,7 @@ ARG DOWNLOADS_URL="downloads.bitnami.com/files/stacksmith" ARG TARGETARCH LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \ - org.opencontainers.image.created="2026-05-27T06:34:25Z" \ + org.opencontainers.image.created="2026-05-27T14:52:43Z" \ org.opencontainers.image.description="Application packaged by Broadcom, Inc." \ org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/argo-cd/README.md" \ org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/argo-cd" \ @@ -29,8 +29,8 @@ RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \ mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \ COMPONENTS=( \ "nss-wrapper-1.1.16-0-linux-${OS_ARCH}-debian-12" \ - "helm-4.2.0-0-linux-${OS_ARCH}-debian-12" \ - "argo-cd-3.4.2-0-linux-${OS_ARCH}-debian-12" \ + "helm-4.2.0-1-linux-${OS_ARCH}-debian-12" \ + "argo-cd-3.4.2-1-linux-${OS_ARCH}-debian-12" \ ) ; \ for COMPONENT in "${COMPONENTS[@]}"; do \ if [ ! -f "${COMPONENT}.tar.gz" ]; then \ @@ -51,7 +51,7 @@ COPY rootfs / RUN /opt/bitnami/scripts/argo-cd/postunpack.sh ENV APP_VERSION="3.4.2" \ BITNAMI_APP_NAME="argo-cd" \ - IMAGE_REVISION="5" \ + IMAGE_REVISION="6" \ PATH="/opt/bitnami/common/bin:/opt/bitnami/helm/bin:/opt/bitnami/argo-cd/bin:/opt/bitnami/argo-cd/hack:/opt/bitnami/ksonnet/bin:/opt/bitnami/kustomize/bin:$PATH" USER 1001 diff --git a/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/argo-cd-3.4.2-0-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/argo-cd-3.4.2-0-linux-amd64-debian-12.tar.gz.sha256 deleted file mode 100644 index 507345964477..000000000000 --- a/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/argo-cd-3.4.2-0-linux-amd64-debian-12.tar.gz.sha256 +++ /dev/null @@ -1 +0,0 @@ -ab5f871624dcb3f7a79b8fedd12405d3c63af5a8e4d697308065b247c1b43a3e argo-cd-3.4.2-0-linux-amd64-debian-12.tar.gz diff --git a/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/argo-cd-3.4.2-0-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/argo-cd-3.4.2-0-linux-arm64-debian-12.tar.gz.sha256 deleted file mode 100644 index 2f176e5cc7f3..000000000000 --- a/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/argo-cd-3.4.2-0-linux-arm64-debian-12.tar.gz.sha256 +++ /dev/null @@ -1 +0,0 @@ -6479403f730c3f7e9a1b43c2dfaf5eb1941678d741ba573f1d03457ef1361090 argo-cd-3.4.2-0-linux-arm64-debian-12.tar.gz diff --git a/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/argo-cd-3.4.2-1-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/argo-cd-3.4.2-1-linux-amd64-debian-12.tar.gz.sha256 new file mode 100644 index 000000000000..6003517d0381 --- /dev/null +++ b/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/argo-cd-3.4.2-1-linux-amd64-debian-12.tar.gz.sha256 @@ -0,0 +1 @@ +40fee1f4101c3b14124ec0d14b3d1ef33b22048feb27dc929321fff290c7178a argo-cd-3.4.2-1-linux-amd64-debian-12.tar.gz diff --git a/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/argo-cd-3.4.2-1-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/argo-cd-3.4.2-1-linux-arm64-debian-12.tar.gz.sha256 new file mode 100644 index 000000000000..f8ad8fbd58f5 --- /dev/null +++ b/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/argo-cd-3.4.2-1-linux-arm64-debian-12.tar.gz.sha256 @@ -0,0 +1 @@ +dcdb9b8dcf65c214e63fc087be6371b85502aeb4e767662bd9aa9bb1a816091c argo-cd-3.4.2-1-linux-arm64-debian-12.tar.gz diff --git a/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/helm-4.2.0-0-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/helm-4.2.0-0-linux-amd64-debian-12.tar.gz.sha256 deleted file mode 100644 index 5b6a85a86326..000000000000 --- a/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/helm-4.2.0-0-linux-amd64-debian-12.tar.gz.sha256 +++ /dev/null @@ -1 +0,0 @@ -b934efd34b06e7ebad2642b458a08cf6f6f3082157f4af8e2a1b261f2e3dadef helm-4.2.0-0-linux-amd64-debian-12.tar.gz diff --git a/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/helm-4.2.0-0-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/helm-4.2.0-0-linux-arm64-debian-12.tar.gz.sha256 deleted file mode 100644 index 709c020215cd..000000000000 --- a/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/helm-4.2.0-0-linux-arm64-debian-12.tar.gz.sha256 +++ /dev/null @@ -1 +0,0 @@ -c311266cd67ef4de5a0b7f2ed10b7f45329df7ca3ef86332b6cdcbebaa43570e helm-4.2.0-0-linux-arm64-debian-12.tar.gz diff --git a/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/helm-4.2.0-1-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/helm-4.2.0-1-linux-amd64-debian-12.tar.gz.sha256 new file mode 100644 index 000000000000..1b6a562144f4 --- /dev/null +++ b/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/helm-4.2.0-1-linux-amd64-debian-12.tar.gz.sha256 @@ -0,0 +1 @@ +b585d7e6f9c565c138b22d9251044787d7b5ef59bd6e975fb84bc927761071d2 helm-4.2.0-1-linux-amd64-debian-12.tar.gz diff --git a/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/helm-4.2.0-1-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/helm-4.2.0-1-linux-arm64-debian-12.tar.gz.sha256 new file mode 100644 index 000000000000..a2c12e5d2531 --- /dev/null +++ b/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/checksums/helm-4.2.0-1-linux-arm64-debian-12.tar.gz.sha256 @@ -0,0 +1 @@ +95287b96bfdd42512c8d4c9c18e49f3181fc21f720577f3976196d81bb4d76d5 helm-4.2.0-1-linux-arm64-debian-12.tar.gz diff --git a/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/scripts/libfs.sh b/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/scripts/libfs.sh index 1337f6c2dd59..b16efabd3230 100644 --- a/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/scripts/libfs.sh +++ b/bitnami/argo-cd/3.4/debian-12/prebuildfs/opt/bitnami/scripts/libfs.sh @@ -131,6 +131,7 @@ relativize() { # -d|--dir-mode - mode for files. # -u|--user - user # -g|--group - group +# -n|--no-dereference - do not follow symlinks (use for runtime root chown of daemon-writable dirs) # Returns: # None ######################### @@ -140,6 +141,7 @@ configure_permissions_ownership() { local file_mode="" local user="" local group="" + local follow_symlinks="yes" # Validate arguments shift 1 @@ -161,6 +163,9 @@ configure_permissions_ownership() { shift group="${1:?missing group}" ;; + -n | --no-dereference) + follow_symlinks="no" + ;; *) echo "Invalid command line flag $1" >&2 return 1 @@ -169,22 +174,29 @@ configure_permissions_ownership() { shift done + # -L: follow symlinks and emits the target path + # This is dangerous at runtime, given a co-located lower-privileged process with write access + # to the target path can redirect the chown/chmod to arbitrary paths. Example: + # Lower-privileged process run: ln -s /etc /tmp/etc + # Then, setup.sh runs: configure_permissions_ownership --dir-mode 775 /tmp + local find_L_flag=(); [[ "$follow_symlinks" == "yes" ]] && find_L_flag=("-L") + # -h: changes symlink inode ownership without touching the target. + local chown_flags=(); [[ "$follow_symlinks" == "no" ]] && chown_flags=("-h") read -r -a filepaths <<<"$paths" for p in "${filepaths[@]}"; do if [[ -e "$p" ]]; then - find -L "$p" -printf "" if [[ -n $dir_mode ]]; then - find -L "$p" -type d ! -perm "$dir_mode" -print0 | xargs -r -0 chmod "$dir_mode" + find "${find_L_flag[@]}" "$p" -not -type l -type d ! -perm "$dir_mode" -print0 | xargs -r -0 chmod "$dir_mode" fi if [[ -n $file_mode ]]; then - find -L "$p" -type f ! -perm "$file_mode" -print0 | xargs -r -0 chmod "$file_mode" + find "${find_L_flag[@]}" "$p" -not -type l -type f ! -perm "$file_mode" -print0 | xargs -r -0 chmod "$file_mode" fi if [[ -n $user ]] && [[ -n $group ]]; then - find -L "$p" -print0 | xargs -r -0 chown "${user}:${group}" + find "${find_L_flag[@]}" "$p" -print0 | xargs -r -0 chown "${chown_flags[@]}" "${user}:${group}" elif [[ -n $user ]] && [[ -z $group ]]; then - find -L "$p" -print0 | xargs -r -0 chown "${user}" + find "${find_L_flag[@]}" "$p" -print0 | xargs -r -0 chown "${chown_flags[@]}" "${user}" elif [[ -z $user ]] && [[ -n $group ]]; then - find -L "$p" -print0 | xargs -r -0 chgrp "${group}" + find "${find_L_flag[@]}" "$p" -print0 | xargs -r -0 chgrp "${chown_flags[@]}" "${group}" fi else stderr_print "$p does not exist"