Craig Andrews
Craig Andrews
> Hi @candrews, faced a similar issue while restricting method calls for `Class` #1027. > > This issue for `org.springframework.web.context.support.GenericWebApplicationContext` was introduced in [a459a02](https://github.com/thymeleaf/thymeleaf/commit/a459a02fe21604f453c0426bad9203027d588687). `org.springframework.web.context.support.GenericWebApplicationContext` implements `org.springframework.core.io.ResourceLoader` and thus it's...
How can we make progress on this issue? My colleagues and I can't really go back to non-rootless dind so this is a big problem for us. I see https://github.com/moby/vpnkit/pull/645...
https://github.com/moby/vpnkit/pull/645 was merged!
What is the next step towards resolution of this issue?
https://github.com/moby/vpnkit/issues/509#issuecomment-2907526284 asks some excellent questions and provides really useful analysis. Can this issue be revived and moved forward please?
With the addition of the slirp4netns in https://github.com/docker-library/docker/pull/543, I re-ran the test @Vigrond provided at https://github.com/moby/vpnkit/issues/509#issuecomment-2907526284 with the new `DOCKERD_ROOTLESS_ROOTLESSKIT_NET=slirp4netns` environment variable configuration: ``` docker run -e DOCKERD_ROOTLESS_ROOTLESSKIT_NET=slirp4netns --rm -d...
Do you have any estimate as to when cyclonedx 1.6 support will be available? Thank you!
Trivy 0.5.3 (see https://github.com/aquasecurity/trivy/issues/6902) produces CycloneDX 1.6, meaning that this tool doesn't work with the latest version of Trivy.
buildkitd pod is failing on kubernetes cluster having PSP even after allowing unmasked ProcMounTypes
Is there any way to eliminate the use of `newuidmap`/`newgidmap`? I need to be able to run buildkit in a context with `allowPrivilegeEscalation: false`. I came across https://unix.stackexchange.com/questions/759533/what-causes-newuidmap-to-be-dissallowed-in-new-user-namespace - perhaps...
buildkitd pod is failing on kubernetes cluster having PSP even after allowing unmasked ProcMounTypes
Those projects are unmaintained - is there a maintained, actively used solution available?