Morten Linderud

I have mocked up some draft vocabulary based on the discussions in these issues, and I think the inclusion of "Mirrors" as a concept for the Repository actor can prevent...

I don't think so. The work on having kernel.org working with `omniwitness` would imply having to write something that parses their current log into something compatible and have them parse...

I personally have some motivation to look into the sumdb code from golang. It's frankly simpler then the trillian monstrosity using grpc and god knows what.

Wait, what. Now I'm confused by what the [mod/sumdb](https://github.com/golang/mod/tree/master/sumdb) is suppose to contain. There is no traces of trillian anywhere in their github org. Is the backend proprietary?

Right, so I checked the gopher slack and it is indeed proprietary. It's apparently "not a lot of code" on top of trillian, but the storage code is heavily tied...

I'm a bit skeptical of adding `become_root` as It's more dependencies which needs to be packaged. It's a bit unclear what functionality we'd need to replace though. Parsing `/etc/subuid` shouldn't...

The fuse-overlayfs issue is fixed. Nice. So I'll try take a dig at how nsjail works and how we can try land this :)

As a sidenote, there is also https://github.com/containers/bubblewrap which tries some of the same things like nsjail.

Also, If you are able to rebase ontop of master it would be easier for me to test things.

It's not rebased :)