Giuseppe Scrivano
Giuseppe Scrivano
sure, that is something we can add. I've nothing against it. Interested to open a PR to expose the setting?
some OCI runtimes (crun and runc do) got a new verb `features` to check what features are supported, but I see that both runtimes do not mention `no-new-keyring` and that...
to follow what Kubernetes does upstream, then we need to enforce `idmap` on each volume when `hostUsers: false` is used
yes idmap works only with root. Not sure how this should be handled. Is it better to not follow what Kubernetes does in this case? Maybe we could expect `idmap`...
@containers/podman-maintainers PTAL
I own the `oci.run` domain, not Red Hat. I am fine to hand it over (one thing less to pay for 😄), and personally I'd even donate/move the entire crun...
does it show it constantly off or is it a temporary peak value?
I am not sure we can ignore it, it seems the systemd slice got into some weird state and we are leaking it. It can possibly be a problem if...
potential fix: https://github.com/containers/common/pull/2108
and the vendor PR: https://github.com/containers/podman/pull/23456