Giuseppe Scrivano

@kolyshkin could you include the new changes into your release?

@saschagrunert are these CI failures expected?

@ktock what is needed for chunk validation in Podman/CRI-O/Buildah? Isn't that part done by the snapshotter itself?

it is probably coming from `$syscall in KERNEL(5.3) => ERRNO(EPERM);` Could you tweak the kernel version there to use 3.10? You may need to pull the latest changes I've pushed.

> I assume it is immediately exiting after this since it doesn't complain about others that don't exist. It would be nice to have a mode where it just warns...

would it be better to run easyseccomp from a container using an updated OS image? The bpf filter generated on a new system works well on older systems/kernels.

I wasn't aware that the bpf produced by easyseccomp would not work on old kernels. Have you already found out what directive is causing the problem? does something simple `=>...

since more users are asking for it, I think at this point it is useful to have it. Anyone would like to open a PR?

for trivial contributions, it shouldn't even matter since they are not significant for copyright purposes, e.g. even GNU projects accept such contributions without copyright papers: https://www.gnu.org/prep/maintain/maintain.html#Legally-Significant

now we are offering amd64, arm64, s390x, ppc64le, riscv64. I think that is enough to close this issue.