Derek McGowan

This was a previously opened and closed issue within Docker. Although it was closed, it was not rejected, see https://github.com/docker/docker/pull/10117. I am supportive of this change but need to verify...

> This prevents alternative S3 storage such as Minio, Scality and StorageGRID from running encrypted but with an invalid cert. Does not prevent it, just currently requires that such solutions...

@whoshuu I don't like adding support for `InsecureSkipVerify` except for clearly defined development use cases. For registry development there are already plenty of other storage configurations which can be used....

The summary above is the only outline we have of this work. To be more detailed, see the [current database structure](https://github.com/containerd/containerd/blob/master/metadata/buckets.go#L45). This work would involve updating the storage to have...

Not sure about just removing that test condition for overlay. The "some kernels" are referring to cases when overlayfs may have unexpected behavior. Its better to explicitly skip the test...

@dajester2013 can you try with an updated version of containerd? containerd 1.3 is end of life and there have been many devmapper fixes since that release.

The point of the temp mount logic in the first place is to have the mount be short lived and used exclusively. It doesn't really account for this scenario of...

Is there a specific problem the original issue uncovered or is the intent here to help debug a configuration issue? Collecting all the errors together and selecting out a single...

These bindings seem like they could be interesting in building normal containers which run a Go process and run wasm code. For doing that this runtime would not be necessary....

@thaJeztah I think that is related but the core of the issue is that the digest references are treated as separate references and do not hit the match filter. We...