feat(security): enforce trusted-registry image policy at the orchestrator pull sites

lfg2025/archy

Catalog- and manifest-supplied image refs reached pull_image without
ever passing the RPC boundary's validator — a malicious catalog entry
or manifest could pull from an arbitrary registry. The allowlist now
lives in container::image_policy (the RPC check delegates to it) and
both orchestrator pull sites (install_fresh and
ensure_resolved_source_available) refuse refs that fail it.

The shared policy accepts trusted-registry refs and registry-less
Docker Hub shorthand (grafana/grafana etc., used by 8 shipped
manifests — a registry-less ref cannot name an attacker host), and
rejects explicit non-allowlisted hosts, shell metacharacters, and
malformed refs. §A of the 1.8.0 hardening plan.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

This commit is contained in:

archipelago

2026-07-04 09:52:31 -04:00

co-authored by

Claude Fable 5

parent 2f20ba8148

commit 4b4a1f88fb

5 changed files with 126 additions and 33 deletions

									
										core/archipelago/src/container/mod.rs
									
		+1
		
												View File
												
				@@ -7,6 +7,7 @@ pub mod dev_orchestrator;

				pub mod docker_packages;

				pub mod filebrowser;

				pub mod hooks;

				pub mod image_policy;

				pub mod image_versions;

				pub mod lnd;

				pub mod prod_orchestrator;