Fu Wei

ping @ningmingxiao sorry for late reply. Added my comment, PTAL. Thanks

Hi @jokemanfire , > rust-shim looks like use fifo directly , have no pipe in it. Yes, the rust-shim opens fifo directly. Without sub-cgroup for each exec process, I don't...

> It defaults that Shim can disable the writing end of IO When container holds fifo directly, the write side of fifo must be hold by the processes created by...

@jokemanfire > And show the test performance data , if the performance is worth it . And I think change process.io.wait is more valuable Sorry I didn't follow you here....

> Thanks for your patience , I know that the process is runc to start that , and hold the fifo write (such like sh -c sleep 365d), But I...

@tedli Thanks for the comment. Yeah, the network namespace fd is still open by somewhere. The user should check the CNI first.

> Eventually we may want to migrate all workflow checks to Prow. Is it any reason to move workflow to Prow?

> It's part of the effort of https://github.com/kubernetes/k8s.io/issues/6102. > > > > At least the Prow has more powerful machine, we can have shorter running time for the performance test....

Thanks for the mention. Let me update that doc.

REF https://github.com/containerd/containerd/issues/9929#issuecomment-1978318937