Thomas

Maybe the operator could remove the privileged security context if the user space implementation is being used?

> Did you got any success running it atop of Talos? > > I've added `pod-security.kubernetes.io/enforce: privileged` label to namespace - do you think it's safe and enough? I use...

@Twi The only label which should be necessary is `pod-security.kubernetes.io/enforce: privileged`. The logs may complain without some of those other labels, but it will work.

It would be a nice feature to have, though it is important to note this is not specific to Talos but any Kubernetes cluster which enforces the baseline pod security...

I wonder what the right way to do this is? I guess the first step is to add some configuration option to force user space (and remove NET_ADMIN from the...

Sort of blocked by #164

@jodevsa Would it be possible to merge this soon? Now? It looks like a lot of changes are being made and it would be great to prevent potential issues!

Okay, again, took a little while to fully understand what was going on but we got there I believe. There was an old `PodLogs` resource in the namespace which had:...

>container: '.av1', This should be `mkv`? I don't believe av1 is a valid container.

Thank you so much for this. The offset by one trick (1280x719 or 1280x721) worked perfectly. I found that 2560x1080 HiDPI was more appropriate for my 3440x1440 display though, which...