Chengyu Zhu

@stevenhorsman @liudalibj I modified the condition for the second and third tests in k8s-guest-pull-image.bats, so that they would pass. We can revert it if we use containerd 2.0 with the...

I really appreciate your understanding @danmihai1 !

>There is a balance to be struck. Personally I would say that we have to support some kind of signed images on every platform. It might be reasonable to say...

>Let's avoid the ~20% increase compared to my example. I agree that ~120k will probably work in my cluster too - but in my experience k8s starts rejecting these annotations...

Hi, if you want to run a container with runc when enabling tarfs mode, you could try to set `enable_kata_volume` to false.

cc @imeoer

I think the method maybe not perfect, but it could resolve the current issue.