contenthash: allow security.capability in cache checksum

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-06-07 22:16:56 -07:00 · 2020-06-07 22:16:56 -07:00 · b0d3737627
parent 920772c593
commit b0d3737627
1 changed files with 1 additions and 1 deletions
--- a/cache/contenthash/tarsum.go
+++ b/cache/contenthash/tarsum.go
@ -39,7 +39,7 @@ func v1TarHeaderSelect(h *tar.Header) (orderedHeaders [][2]string) {
 	// Get extended attributes.
 	xAttrKeys := make([]string, len(h.Xattrs))
 	for k := range h.Xattrs {
-		if !strings.HasPrefix(k, "security.") && !strings.HasPrefix(k, "system.") {
+		if k == "security.capability" || !strings.HasPrefix(k, "security.") && !strings.HasPrefix(k, "system.") {
 			xAttrKeys = append(xAttrKeys, k)
 		}
 	}