Craig Andrews

Results 178 comments of Craig Andrews

> Hi @candrews, faced a similar issue while restricting method calls for `Class` #1027. > > This issue for `org.springframework.web.context.support.GenericWebApplicationContext` was introduced in [a459a02](https://github.com/thymeleaf/thymeleaf/commit/a459a02fe21604f453c0426bad9203027d588687). `org.springframework.web.context.support.GenericWebApplicationContext` implements `org.springframework.core.io.ResourceLoader` and thus it's...

How can we make progress on this issue? My colleagues and I can't really go back to non-rootless dind so this is a big problem for us. I see https://github.com/moby/vpnkit/pull/645...

https://github.com/moby/vpnkit/pull/645 was merged!

What is the next step towards resolution of this issue?

https://github.com/moby/vpnkit/issues/509#issuecomment-2907526284 asks some excellent questions and provides really useful analysis. Can this issue be revived and moved forward please?

With the addition of the slirp4netns in https://github.com/docker-library/docker/pull/543, I re-ran the test @Vigrond provided at https://github.com/moby/vpnkit/issues/509#issuecomment-2907526284 with the new `DOCKERD_ROOTLESS_ROOTLESSKIT_NET=slirp4netns` environment variable configuration: ``` docker run -e DOCKERD_ROOTLESS_ROOTLESSKIT_NET=slirp4netns --rm -d...

Do you have any estimate as to when cyclonedx 1.6 support will be available? Thank you!

Trivy 0.5.3 (see https://github.com/aquasecurity/trivy/issues/6902) produces CycloneDX 1.6, meaning that this tool doesn't work with the latest version of Trivy.

Is there any way to eliminate the use of `newuidmap`/`newgidmap`? I need to be able to run buildkit in a context with `allowPrivilegeEscalation: false`. I came across https://unix.stackexchange.com/questions/759533/what-causes-newuidmap-to-be-dissallowed-in-new-user-namespace - perhaps...

Those projects are unmaintained - is there a maintained, actively used solution available?