Akihiro Suda
Akihiro Suda
Pulling an image by digest seems implemented in https://github.com/optiopay/klar/pull/28 but now broken? ```console $ ./klar-2.4.0-linux-amd64 nginx@sha256:482ead44b2203fa32b3390abdaf97cbdc8ad15c07fb03a3e68d7c35a19ad7595 clair timeout 1m0s docker timeout: 1m0s no whitelist file Can't pull fsLayers ```
https://aws.amazon.com/jp/blogs/containers/new-using-amazon-ecs-exec-access-your-containers-fargate-ec2/
When `.[]hosts.http.auth` is set to "Basic", the username and password will be autogenerated as `~/.norouter/agent/http/username` and `~/.norouter/agent/http/password.SECRET`. For ease of configuration, we might also want to generate `~/.norouter/agent/http/sourceme.SECRET` that contains...
Currently, user needs to install `norouter` binary to all the remote hosts manually. This could be automatically installed using a new YAML field `.install.shCmd` like this: ```yaml hosts: # uses...
In addition to the default unprivileged mode (netstack mode #7), we should also support real TUN mode. Pro: No need to specify `ports` mapping. Con: The user needs to have...
Debian kernel has a non-upstream modprobe option `permit_mounts_in_userns=1` for kernel-mode overlayfs, but seems unstable: moby/moby#42302 So we should recommend fuse-overlayfs for Debian (until the release of Debian 12, which will...
@cyphar Any reason not to have support for pulling OCI images directly without skopeo? e.g. ``` $ skopeo copy docker://alpine:latest oci:/tmp/alpine:latest $ umoci unpack --image /tmp/alpine /tmp/alpine-bundle ``` could be...
We should have a utility command to show the `user.rootlesscontainers` xattr value in a human-readable format. e.g. ```console $ id -u 1001 $ ls -ln /path/to/bundle/etc/ ... -rw-r----- 1 1001...