James Le Cuirot

This is good, thank you. Is `-U` needed with `./run_sdk_container` to use binary packages? I've not done much with binary packages locally. I know we're talking about building the whole...

Portage downloads files in the background while building, assuming that `FEATURES="parallel-fetch"` is on, so it shouldn't hold everything up. Downloading tons of small files like this obviously isn't what Portage...

Okay, but how much of that time is on packages with more than one file?

> We are in the process of transitioning away from cgroupv1, so I found this in the log - would be nice if this is elevated: > > ``` >...

I've been asked to look at this. I don't yet know how CoreOS does it though, so please give me time.

CoreOS has a 2KB area for embedding kernel arguments into the isolinux and GRUB configs too, which is interesting. ``` ### BEGIN /etc/grub.d/10_linux ### menuentry 'Fedora CoreOS (Live)' --class fedora...

Are you sure we actually need Azure CLI? This is normally only needed when signing manually. In CI, you're more likely to use a managed identity or a token set...

I figured managed identities wouldn't be possible, but I thought environment variables might be. They are, but service principal secrets are not recommended. However! I chatted with Copilot, and it...

> I've just reworked the PR. Now instead of building the sysext directly using `systemd-repart`, I keep the original workflow and then wrap the `.raw` file into a signed DDI...

Yeah, I thought this was already solved, but I'm not familiar with the approach because my distro, Flatcar, cannot benefit from it.