Giuseppe Scrivano

> This is a case where the OCI runtime is creating a userspace environment that is not aligned with what any Unix has done, historically. Other programs that create a...

@slp could this be useful for krun?

> @giuseppe > Just to be sure, crun doesn't implement Intel RDT, does it? correct, it is not implemented in crun

@ktock @GerrySeidman what do you think about having layer verification as suggested in https://github.com/containers/storage/pull/795#issuecomment-2004290352 ?

what system are you using with such an old bison version?

how long have you waited for podman? If the latency to the registry is high, accessing files can be quite slow. Does it work if you try to read a...

we'd need to duplicate the code from `os/exec.LookPath` since it ignores files that are not executable. Would it help if we improve the error message, something like: ```diff diff --git...

you can also override it with `--sysctl`, in your case it will be: `--sysctl="net.ipv4.ping_group_range=999 999"`

also keep in mind that running without root is not generally supported, there is some code in crun to allow it, but for example it fails with runc: ``` $...

the OCI runtime sets it, so it is out of our control. We'd need to extend the OCI runtime specs to support "optional" sysctls. It would be easier to teach...