Repository navigation
OCI layer extraction fails with "unsupported file mode" on some bundle images #332
Description
Problem
extractTarToDir in internal/ocihelper/ocihelper.go:181 passes os.FileMode(header.Mode) directly to root.OpenFile. Tar headers can include Unix file-type bits (e.g. 0100644 for a regular file), not just the 9 permission bits. Go's Root.OpenFile rejects any mode with bits above 0o777 with unsupported file mode.
This fails for bundle images whose builder writes full Unix mode values into tar layers (e.g. stackrox-operator-bundle:vlatest), while images that only store permission bits (e.g. v4.11.6) work fine.
Fix
Mask the mode on line 181:
os.FileMode(header.Mode) & os.ModePermReproduction
https://github.com/stackrox/central-login/actions/runs/41603850345/job/125808734282?pr=621
Activity