pkg/

Package fseval provides a generic interface for all filesystem operations done by umoci when working in the image rootfs, which allows for alternative implementations of the filesystem operations to be easily swapped in.

Package hardening implements security hardening measures within umoci.

Package mtreefilter provides helpers to construct filters that can be applied on mtree manifests, allowing you to filter out changes from being included in a tar diff layer.

Package unpriv provides rootless emulation of CAP_DAC_READ_SEARCH without the need for rootless user namespaces.