Markus Rudy

Thanks, @fidencio, I'd be happy to maintain the Darwin build target for the developer tools. Until we get this sorted out, it would be nice if we could move forward...

> @burgerdev The description states "_and adds a CI step to ensure it keeps building in the future_". I do not see the additional CI step in the changed files....

This PR broke the link checker on main :/

> [...] the kata-agent should focus on the management and running of containers within the VM and therefore measurement and attestation of configuration relevent to this. > We observed Trustee...

We would not even need to overlay them - it should be enough to find the last layer containing an `/etc/passwd` file (respecting whiteouts).

Thanks for writing this up! I'm overall in favour of this approach, just one remark: The `stateAction` looks a bit like a JSON Patch. Could we go all the way...

> I believe that this is a nice generalization of the problems outlined in #9957. > > I'm a bit concerned about possible abuses. Consider the example of a pod...

Thanks for investigating this, @thaJeztah. I also tested this with docker and can confirm your observation, but discounted it because I thought docker may be introducing some special treatment here....

My expectation is that the map key is not silently ignored, but I can see that this is tricky. Maybe another example helps clarify: ```go var newMap map[string]*struct{} if err...

Hey @anakrish and @tjons, Good to see that you started working on the missing `net` functions! I'd also be interested in this feature, and also willing to help with the...