Tobias Wolf

I think I get the same thing, just FYI: ``` #5 [2/4] RUN apk --no-cache add --repository http://dl-cdn.alpinelinux.org... #5 digest: sha256:421cf23668e2abb7ca968581f731eb73cf424b2d8da6358752244806ea2bef29 #5 name: "[2/4] RUN apk --no-cache add \t--repository http://dl-cdn.alpinelinux.org/alpine/latest-stable/community...

For me adding `seccomp.security.alpha.kubernetes.io/pod: unconfined` does not change anything. I have Kubernetes 1.13.3, with some PodSecurityPolicies. But I tried to make sure that the pod has all permissions it needs....

I tried replacing `dockerd` with `containerd` (1.2.6) today, and now it works with the same input YAML. `Successfully built docker.io/library/irssi:latest`

However I get this message: `time="2019-04-08T21:13:22Z" level=warning msg="Process sandbox is not available, consider unmasking procfs: mount: permission denied (are you root?)\n"` What does this mean @AkihiroSuda?

@AkihiroSuda how can I tell from the host system or from the container runtime that the unmasking worked successfully or not? Because I have this now and with containerd `img...

@AkihiroSuda > `kubectl exec foo grep "^tmpfs /proc/.*" /proc/mounts` shows masks if masked So I reckon that this is bad, from inside the container? ``` / $ grep "^tmpfs /proc/.*"...

For me the big advantage is that this project can be used as a drop-in replacement and it presents such a familiar interface that we can basically symlink `img` to...

Just a minor data point, we are using "Webkit for Wayland" (instead of Chromium) by building a custom version [of this](https://github.com/WebPlatformForEmbedded/buildroot) and it is really smoothly animating the WebGL. It...

You need to specify a filter, so e.g., `.` is the simplest filter.

What is the difference of these two? `nginx_ingress_controller_response_size_sum` `nginx_ingress_controller_bytes_sent_sum` I think they are identical? So the metrics are duplicated for no clear benefit? And these metrics are histograms with a...