Aleksa Sarai

I'm not sure this completely fixes #5023 -- yes, it stops the reset issue but still leaves you with the same problem that #4858 was trying to solve. If you...

runc does work with older libseccomp versions (usage of new features is gated via API version checks), though I don't think we have tests for that. I think requiring a...

Ah, I was trying to say you **should** do it for precisely that reason, but I think the wording makes it seem a little confusing ("dynamic linking against" should probably...

I spoke with @stgraber about this last week and was going to submit a patch for it but I'm not familiar enough with the goals of `lxc.apparmor.profile = generated` to...

Update [from the Proxmox bug about this](https://bugzilla.proxmox.com/show_bug.cgi?id=7006#c12): > Wolfgang and me discussed this yesterday before your comments, and we will likely follow Incus approach and just drop those restrictions in...

https://lore.proxmox.com/pve-devel/[email protected] is their downstream patch. I can try to adapt it for upstream if you like.

Please direct Proxmox related questions to https://bugzilla.proxmox.com/show_bug.cgi?id=7006 or their forums, this is not a Proxmox support forum.

Yeah, this is an unfortunate limitation of `golang.org/x/sys/unix`. Maybe we should just call the syscall directly...

@kad We need to "unset" the affinity if it was not specified, this was explicitly done in #4858 for a reason. We've had customers that ran into performance issues because...

Sorry, two mistakes in that comment: 1. runtime-spec v1.3, not v1.4 (which doesn't exist yet). 2. I thought https://github.com/opencontainers/runtime-spec/pull/1296 was already merged but it isn't. At the moment we only...