Alex Pyrgiotis

Thanks a lot for this bug report @mstgrv. I would assume that the PDF rendering engine would include form input in the rendered page, so this looks like a regression....

## Possible solutions 1. Can we pipe the pages from container 1 to container 2, and call the program that "unites" them with the stdin as an argument? This would...

Oh, just in case it was not clear, you can check out [Dangerzone 0.4.0](https://github.com/freedomofpress/dangerzone/releases/tag/v0.4.0.) from our GitHub releases page. For macOS, you can download ` Dangerzone-0.4.0.dmg`. Hope that helps :slightly_smiling_face:

We also need to find out if this affects Windows / MacOS platforms, i.e., if `tmpfs` is used there.

@mstgrv: Did you manage to look more into it perhaps?

Hi @Anish-M-code! This is not a dumb question at all. In fact, making syscalls more difficult to exploit is one of the goals for this release, and our plan is...

Also, an interesting route is using gVisor *within* the container. This is not a typical way to use gVisor, but it's multi-platform and is a solid start. I have actually...

Stumbling into an issue when running gVisor in rootless Podman: ``` $ runsc -debug -network none -rootless do echo ok Error reading mounts file: error unmarshaling mounts: unexpected end of...

Update regarding the upstream issue. It seems that the devs have a fix for this bug (https://github.com/google/gvisor/issues/8205#issuecomment-1849178757), which paves the way to use rootless gvisor within rootless Podman.

I have some exciting news in this front! Dangerzone will be integrated with gVisor very soon. Keep an eye on #590...