Diagnostic code

ZBX-E0515

a layer entry would leave the image's root

Kind

error

Blame

external

Exit code

3

What it means

A layer of the image holds an entry that could write outside the directory the image is unpacked into, and zbx refused the whole layer: an absolute path, a path with "..", a path that goes through a symlink (the layer or an earlier one made it), or a hard link to a path outside the image. An honest image has none; the message names the entry.

Nothing from the image was kept in the store as a tree. The blobs that were downloaded stay, so the layer is not fetched again. Do not run an image you did not build or trust.

Offline

The same text, without a network:

zbx explain E0515