Eero Tamminen

This ticket could be pivoted from local NFD worker API to master remote service API instead, assuming one is suitable for updating features directly. Looking at NFD master code: *...

If one wants to get rid of a host volume too, k8s has a (v1.23) Beta feature (enabled by default) which can help... When Pod `spec.internalTrafficPolicy` is set to `Local`,...

K8s admin needing to create tmpfs on every node to make sure host mounted things will get cleaned out eventually, is quite ugly. One way to improve this would be...

> n+2: drop hooks support entirely, make minimal image the default image, drop the big image or e.g. rename it to -debug I would propose NFD to drop the big...

I would propose that: * #858 is implemented before this (if accepted), as it's an alternative for labels that may need to be updated during NFD run-time * #857 is...

Btw. was nfd-worker local socket ever considered for label updates instead of hooks?

Added separate tickets for the life-time management improvements, and for adding socket API for external features.

> I figure checking the modification times is more CPU-friendly (just a stat and a time compare) than checksumming Checking modification time is not robust, because user can make multiple...

Why "cpu-security" instead of "cpu.security"? If it's a subdomain, I think it should be separated by a dot...

As that's not the minimal image, according to documentation it contains run-time support for Bash and Perl hooks: https://kubernetes-sigs.github.io/node-feature-discovery/v0.11/advanced/customization-guide.html#hooks I.e. has several libs that may get out of date /...