Ayush Ranjan

I think `flake8` missed this one at least https://github.com/illinois-cs241/broadway-api/pull/58/files#diff-6eef5733ba2a781f06839a31d0a6f5eeL153 https://github.com/illinois-cs241/broadway-api/pull/58/files#diff-6eef5733ba2a781f06839a31d0a6f5eeL164

This seems to be running fine for me on an A100-40GB machine in GCE on driver version `535.104.05`: ``` (base) ayushranjan_google_com@a100:~/issue10413$ docker run --runtime=runsc --shm-size=128g --gpus=all --rm issue10413:latest Hello from...

Updated driver version and still can not repro the failure on my GCE VM: ``` (base) ayushranjan_google_com@a100:~/issue10413$ docker run --runtime=runsc --shm-size=128g --gpus=all --rm issue10413:latest Hello from inside container. Processes: current_process=psutil.Process(pid=1,...

@thundergolfer Let me know if https://github.com/google/gvisor/commit/e9b3218681cdfac0989e95b27642e4aec67d0ea6 fixes the issue. If so, please close this.

Are you still hitting this issue?

> Since gVisor's "top" part of the overlay lives in gVisor memory only, it's not on the host filesystem anywhere, so there's no way for this Docker code to count...

Actually https://docs.docker.com/reference/cli/docker/inspect/#size intends to track the size of files, not disk usage. So it is unclear whether a similar containerd fix (https://github.com/containerd/continuity/commit/bc5e3edd2b742c38c762d928f267ad82922a1b63) should be applied in this case as well....

IIUC k8s also has [`initContainers`](https://kubernetes.io/docs/concepts/workloads/pods/init-containers/) which gVisor supports. From my understanding, the root container is still the pause container and init containers are run as "regular subcontainers". The init containers...

This work may be more involved. The control FD is used to perform various operations on a file (see [usages](https://cs.opensource.google/gvisor/gvisor/+/master:pkg/sentry/fsimpl/gofer/directfs_dentry.go;l=96;drc=f8f12199af64189db7dd98b8bc52a48b7fb029b9)). Some of those operations will fail with EBADF if the...

I am a bit confused, if access(2) fails with EPERM due to lack of read permission for `/proc` directory, then won't ioutil.ReadDir() (which should use getdents(2) on an open FD)...