Fu Wei

I was handling this in #5885 which hope that it can help. It works but I didn't handle it with full testing. And If the rollback is not handled well,...

> we do the setup of the netns in containerd for windows and for linux we let the OCI runtime handle it @rata Maybe it is out of topic. The...

> > 1. create container record without netns info > > > 2. setup netns info > > > 3. update container record with netns info > > > 4....

Sorry for so late reply on this pull request. I like that idea - TTRPC-izes NRI, even if NRI is about binary call. Currently, the containerd supports NRI hook in...

> I'm fine with the approach proposed here. > > @fuweid Would you work on? Currently, I have plan to work on this. If you already has patch for it,...

at https://github.com/containerd/containerd/issues/7196#issuecomment-1192106644 > For the CNI installer, it can't just delete the system-level folder because it might contain other files. Just my two cents. Yeah. I think the setup script...

Thanks @AkihiroSuda comment(from slack channel). Since we need to test SeLinux, we still need the vagrant box for that. I think we can migrate some parts to github action. :)

Agree with @dcantah. The change won't help unless we support new prefix like `xxx.snapshot.containerd.io/`. [Kubernetes' annotation definition][1]: > Valid annotation keys have two segments: an optional prefix and name, separated...

Hey, the cri-containerd will use your mirror settings to retrieve data first. For your case, if the tag is NONEXISTENT, it means that your mirror settings is wrong and cri-containerd...

@candlerb https is by default for registry. The mirror setting is to allow user to setting up insecure request (http). ```toml [plugins.cri.registry.mirrors."foo.com"] endpoints = ["http://127.0.0.1:32000"] ``` For your case, it...