[v4.4.1-rhel] remote,build: error if containerignore is symlink

[TomSweeneyRedHat]

Drop support for remote use-cases when .containerignore or .dockerignore is a symlink pointing to arbitrary location on host.

Addresses: https://issues.redhat.com/browse/RHEL-13468 and
https://issues.redhat.com/browse/RHEL-16395
CVE-2022-4122

Picked from #16315

Does this PR introduce a user-facing change?

None

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: TomSweeneyRedHat

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [TomSweeneyRedHat]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[TomSweeneyRedHat]

@cevich does this branch have viable tests still? @flouthoc do you by chance know what might be going on with the tests here?

[cevich]

Hrmmm, yes it's enabled and monitored. The most recent branch-level run happened and passed. Investigating...

[cevich]

Ahh, [Fail] Podman search [It] podman search image, is a common (suspected) quay.io flake.

I noticed other branches had switched the tests to use a different image. So it's possible/maybe something is broken just with quay.io/libpod/whalesay? When I run a search against it locally, I also get zero output. But this exact problem was happening at some point on other branches with different images so 🤷‍♂️

@edsantiago does any of this jive with your knowledge or recollection? Is it fixed or still an ongoing problem do you know?

[edsantiago]

I'm guessing this is a takeover of #20906 in the absence of @lsm5? If so, see that PR for the solution. In particular, see the emergency-ci-fix commit.

[cevich]

Thanks Ed, I knew this problem seemed familiar somehow, thanks for connecting the dots 🤣

[TomSweeneyRedHat]

Thanks @edsantiago and @cevich I'd completely forgotten @lsm5 had submitted that. Too many balls up in the air. I'm going to close this and we'll chase down the error in the other PR>