Giuseppe Scrivano

containers/storage#1916 is merged, can we reconsider this?

CC @vbatts

ideally it should be part of the OCI specs, but since it is not a breaking change and if there are no deltas we just fallback to the existing code...

what is the issue you are trying to fix?

> @giuseppe you mentioned the security implications of this features in the linked issue. I think 17992 solved them, so please review. yes, these are solved with #17992

I don't think that is really possible when using the systemd cgroup manager. systemd itself will take care to create the cgroup and for doing that, systemd first needs to...

the kernel returns ESRCH if the process terminates between the `cmdline` file is open and it is read, so it would be good to treat `unix.ESRCH` as `ENOENT` all over...

I've opened a PR for psgo: https://github.com/containers/psgo/pull/155

Containers in a pod do not share the mount namespace (and that is not even possible with OCI containers), so you need to handle that by yourself. Have you tried...

rootless cannot propagate mounts to the host mount namespace. What you can try to do is to use `podman unshare` to join the user+mount namespace used for the rootless environment...