s1gnate-sync

Hi @satmandu, I've found out the issue and it completely unrelated to crun. The reason why it's happening is because chromeos kernel has additional patches. This particular security measure is...

I think so... since run_oci (the only runtime bundled with chromeos) is actually works. I think a possible fix is to make a bind mount to the rootfs instead of...

But something tells me it goes a bit beyond crun/runc + it would require root priveledge to do a bind mount

But that exactly what I did :) Alpine with docker/podman is running under just crosvm ``` crosvm run ${EXTRA_ARGS:-} \ --mem $MEM \ --cpus $CPUS \ --cid "$CID" \ --socket...

I've just added podman and it doesn't require KVM for sure. Actually I'm not even sure if docker requires one as it containers work perfectly fine just on linux namespaces....

Yeah docker engine works without nested kvm, only docker destktop requires one

Just for the record - I've commented about possible cause and potential fix https://github.com/containers/crun/issues/1121#issuecomment-1674448324

to make it even better it would be great if silverbullet can match os theme, it should be relatively easy to detect using ``` @media (prefers-color-scheme: dark) { :root {...

There is a room for improvement, but in require a bit more changes so I decided to split it in two. Since we have `titlebar-area-height` we can also make navigation...

@zefhemel it's chromeos :-)