Use os.Root to forbid file access out of $(aqua root-dir)

[suzuki-shunsuke]

Feature Overview

https://tip.golang.org/doc/go1.24#directory-limited-filesystem-access
https://pkg.go.dev/os@master#Root
https://pkg.go.dev/os@master#OpenRoot

Go v1.24 introduces a new API to forbid file access out of a given directory.

Why is the feature needed?

Generally, aqua creates files only in $(aqua root-dir).
Go's new API enables us to forbid to create files out of $(aqua root-dir).

Example Code

No response

Note

No response

[suzuki-shunsuke]

Go 1.24 was released.
https://go.dev/doc/go1.24#directory-limited-filesystem-access