Akihiro Suda

FreeBSD CI is flaky: mount_nullfs: ...: Resource deadlock avoided

1

> CI seems flaky. > > Can be fixed later, though > > >> time="2021-09-21T14:19:05Z" level=fatal msg="failed to create shim: failed to mount rootfs component &{nullfs /var/lib/containerd/io.containerd.snapshotter.v1.native/snapshots/3 [rw]}: mount [[-o...

We may want to add a boolean value `experimental` in [`nerdctl.toml`](https://github.com/containerd/nerdctl/blob/master/docs/config.md) to allow disabling [experimental features](https://github.com/containerd/nerdctl/blob/master/docs/experimental.md). The default value must stay `true` to keep enabling experimental features,

kata + privileged: `failed to create shim task: QMP command failed: The device is not writable: Permission denied: unknown`

4

### Description ```console $ sudo nerdctl run -it --rm --runtime=io.containerd.kata.v2 --privileged alpine FATA[0004] failed to create shim task: QMP command failed: The device is not writable: Permission denied: unknown ```...

nerdctl-full: compile containerd and runc as static binaries

1

As of 9fea1fe8bd17e4aac80f885b81cb2cb0ca5e5d6a , containerd and runc are dynamically linked with glibc and do not work on Alpine ```console $ ldd bin/* libexec/cni/* bin/buildctl: not a dynamic executable bin/buildkitd: not...

Benchmark and optimization of `nerdctl images`

7

>`nerdctl images` might be slower than before (which has been already slow). > >We should do some benchmark and probably have `--quick` (`--fast`?, idk) flag to skip slow size calculation...

``` === CONT TestExecWithDoubleDash exec_test.go:46: container nerdctl-testexecwithdoubledash is now running exec_test.go:48: assertion failed: error is not nil: expected "success\n", got "" --- FAIL: TestExecWithDoubleDash (0.97s) ``` https://github.com/containerd/nerdctl/runs/7353495895?check_suite_focus=true https://github.com/containerd/nerdctl/blob/b89f0aa0b1701acb376b2706396b4df329f8dc1a/cmd/nerdctl/exec_test.go#L38-L49 Something seems...

Low hanging fruits

1

PR is welcome. #### Lint - [x] https://github.com/containerd/nerdctl/issues/1133 - [x] #1134 Others: https://golangci-lint.run/usage/linters/ #### Docs - Improve "FAQ & Troubleshooting" guide https://github.com/containerd/nerdctl/blob/master/docs/faq.md #### Others [`is:issue is:open label:"good first issue"`](https://github.com/containerd/nerdctl/issues?q=is%3Aissue+is%3Aopen+label%3A%22good+first+issue%22)

Compose: support cosign

10

Depends on: - https://github.com/containerd/nerdctl/issues/611 - - - Cosign support for `nerdctl pull` and `nerdctl push` is being added in #556 #606 (v0.15). We should support cosign for `nerdctl compose` too....

compose: have an option to resolve `~` into the host home directory of Lima / Rancher Desktop

1

### What is the problem you're trying to solve `nerdctl compose up` via Lima or Rancher Desktop resolves `~` in the compose YAML into the guest home `(/home/foo.linux` or `/root`),...

``` === RUN TestMultiPlatformBuildPush testutil.go:394: buildkitHost="unix:///run/buildkit-nerdctl-test/buildkitd.sock" testregistry_linux.go:49: hostIP="10.4.0.1", listenIP="0.0.0.0", listenPort=5000 multi_platform_linux_test.go:43: Testing "linux/arm/v7" ("armv7l") multi_platform_linux_test.go:43: Testing "amd64" ("x86_64") multi_platform_linux_test.go:43: Testing "arm64" ("aarch64") multi_platform_linux_test.go:43: Testing "arm" ("armv7l") multi_platform_linux_test.go:43: Testing "linux/arm" ("armv7l")...