Aleksa Sarai

multi-stage builds

1

Currently we only support single-`FROM` builds. But in Docker `17.05` (docker/docker#31257), multi-stage builds are a thing and for compatibility we need to implement it too -- shouldn't be too hard...

image: generate useful config

3

The previous config generation produced a config which would cause runC to run the container using the host filesystem (with no namespaces set up). While we should try to be...

unpacking tools don't preserve mtime

3

If you call `image.CreateRuntimeBundleLayout` twice on the same image with the same ref, all of the files will have different `mtime`s (and `ctime`s I also believe). You can check this...

makefile: use full package name when building

9

While ./cmd/... works in the canonical Go setup, I have a very interesting Go setup involving symlinks within my GOPATH. It turns out that Go doesn't like this very much...

create-runtime-bundle: generates incorrect Linux config

5

Currently if you take a random Docker image's config file (then translate it to an OCI one using `skopeo`) you'll get a `config.json` which looks like this: ``` { "ociVersion":...

tools: need a tool to update/create manifests

5

I've been playing around with skopeo+image-tools+#5+#8 and I've found that almost all of the necessary tooling we need is available. You can pull base images, create layers, validate layers, unpack...

cannot unpack gzip'd layers

3

Both `oci-unpack` and `oci-create-runtime-bundle` cannot unpack `gzip`'d layers. I haven't read what the spec says about compressed layers (and I know @vbatts has some strong opinions about it) but this...

Currently all of our tooling only really has documentation for each piece. However, once #5 and #8 are merged we will (in principle) have all of the tooling necessary to...

gpgme::encrypt produces "Bad file descriptor" error

2

If you try to encrypt some data with `gpgme::encrypt` I always seem to get the following error: ``` thread 'main' panicked at 'encrypt: Error { source: Some("GPGME"), code: 32779, description:...

This came up in #48 because implementing generic comparisons means we have to come to terms with the limitations of certain spec generators. In particular, because most tar archives don't...