Akihiro Suda

> Do we want to disable UDP by default again? I'd prefer to treat TCP and UDP equally; all the ports can be forwarded by default unless there is an...

Maybe we can hard-code this system port list https://support.apple.com/en-us/103229 to silence errors

> fork/exec /proc/self/exe: operation not permitted Perhaps need: ``` - name: "Set up AppArmor" run: | cat

Looks like `/run/lima-ssh-ready` is not created after rebooting. Also, `/mnt/lima-cidata/` isn't mounted

This seems caused by the recent update of the cloud-init package: https://gitlab.archlinux.org/archlinux/packaging/packages/cloud-init/-/commit/08e804f7c41f7d742496aac6439ea8545d7202b6 https://github.com/canonical/cloud-init/compare/24.2...24.3.1 After this update, `/var/lib/cloud/scripts/per-boot/00-lima.boot.sh` (mounts the cdrom and executes `boot.sh` there) is apparently no longer executed. Potentially...

https://github.com/canonical/cloud-init/commit/143bc9e40f7f33695216db60f73e10a900d1d1cd#diff-eb94d50ed1a0a76032438b4bc5bccb389e9cc03d6766d7881463d8ee75f21f8fR25 introduced the dependency on `nc.openbsd`, but this binary seems missing on ArchLinux - https://github.com/canonical/cloud-init/issues/5809 The `per-boot` script is still not executed after installing `opencat-netbsd` and symlinking `/usr/bin/nc.openbsd` though -...

Probably those tests should be only executed on a laptop outside the CI

> Suggesting that "nerdctl" strings across the codebase are reviewed and at least turned into constants that would be easy to change - or better, maybe we overload global config...

Basically this issue should be discussed in https://github.com/containernetworking/plugins/issues

> If we always have rsync, better to use it instead of scp and minimize the testing matrix. Yes, rsync is always available on macOS and most Linux distros. At...