Akihiro Suda

Thank you @liubin , would you mind submitting a PR?

> just ensure that the binary can access the containerd's Unix socket. No, it will not work as expected because nerdctl and containerd have to share the same filesystem. And...

Probably we can follow the design of diuid although extremely slow https://github.com/weber-software/diuid

> I think it is potentially okay to run without root if the binary can be signed properly. Apple doesn't allow signing a binary with `com.apple.vm.networking` entitlement. They say `This...

> Commits 25 Please remove irrelevant commits and squash your ones. Just like other PRs: https://github.com/containerd/nerdctl/pulls?q=is%3Apr+is%3Amerged

@jsturtevant Could you take a look?

Please remove this https://github.com/containerd/nerdctl/blob/e7858835cb43a54aae10500e99a120db11180701/Dockerfile#L243

> cosign-linux-amd64 81.4 MB Why is this binary so large? https://github.com/sigstore/cosign/releases/tag/v1.4.1

Sorry for going back and forth, but I'd like to see binary footprint to be reduced I'd expect it to be around 10MB

Thanks, 20MB is probably fine