Giuseppe Scrivano

that seems to make sense to me, I am wondering why we currently don't do that. It might be because with images copied with `metacopy` the size is different since...

what is the reason of using `fuse-overlayfs` for root containers?

no, that is not the cause of the problem, fuse-overlays should work from root as well. The error is probably in the cleanup process, that doesn't trigger the unmount for...

> > could you try creating a session with ssh or machinectl? > > Tried with `machinectl shell [email protected]`. The issue still persists. does it exist with containers that you...

> Copying some people who may have thoughts and would act differently perhaps based on outcome, thanks for adding me to the discussion! > I agree with you that OCI...

> Using the image format today potentially lead to multi-arch images down the line. I think the ideal to drive towards would be to have a single WASM artifact that...

just an idea, but to differentiate among different "wasi" versions, could we use the variant field in the OCI image? Similar to what is done for the ARM architecture: https://github.com/opencontainers/image-spec/blob/main/image-index.md#platform-variants

> cc @giuseppe This `zstd:chunked` implementation is largely based on reverse-engineering the code in containers/storage. Is there more formal documentation or test fixtures that I can cross-reference against? @hdonnay, the...

> 👋 Hi, @saschagrunert and @giuseppe. Is there currently any reference or something on running Podman within pods without `privileged:true`? > We have started the project to run fuse without...

> So all in all, I think we're in a situation where the crun/podman upstreams are perhaps not fully in-line? Is a /usr/bin/crun-wasm symlink part of "crun's API" for container...