Skip to content

fix: make tar extraction work in unprivileged containers - #52

Open
Mresyzz wants to merge 1 commit into
infobloxopen:mainfrom
Mresyzz:fix/portable-tar-extraction
Open

Mresyzz wants to merge 1 commit into
infobloxopen:mainfrom
Mresyzz:fix/portable-tar-extraction

Conversation

@Mresyzz

@Mresyzz Mresyzz commented Oct 2, 2026

Copy link
Copy Markdown

The standalone installer currently extracts release archives with tar -xzf. The APX release tarballs contain uid/gid metadata for uid 1001, so installs inside unprivileged containers fail with Operation not permitted even after checksum verification.

This adds --no-same-owner, which keeps the archive contents but lets the current user own extracted files. It fixes the installer in rootless/containerized environments while preserving the existing privileged install path.

Reproduced with OpsScript Gate across Debian 12, Ubuntu 22.04, Ubuntu 24.04, and Alpine 3.20; all four failed at the ownership restoration step.

@Mresyzz

Mresyzz commented Oct 2, 2026

Copy link
Copy Markdown
Author

Verified in a real fork workflow after this change: Debian 12, Ubuntu 22.04, Ubuntu 24.04, and Alpine 3.20 all passed the APX installer matrix. Run: https://github.com/Mresyzz/apx/actions/runs/36982358849

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant