Giuseppe Scrivano

Results 535 comments of Giuseppe Scrivano

sure, that is something we can add. I've nothing against it. Interested to open a PR to expose the setting?

some OCI runtimes (crun and runc do) got a new verb `features` to check what features are supported, but I see that both runtimes do not mention `no-new-keyring` and that...

to follow what Kubernetes does upstream, then we need to enforce `idmap` on each volume when `hostUsers: false` is used

yes idmap works only with root. Not sure how this should be handled. Is it better to not follow what Kubernetes does in this case? Maybe we could expect `idmap`...

@containers/podman-maintainers PTAL

I own the `oci.run` domain, not Red Hat. I am fine to hand it over (one thing less to pay for 😄), and personally I'd even donate/move the entire crun...

does it show it constantly off or is it a temporary peak value?

I am not sure we can ignore it, it seems the systemd slice got into some weird state and we are leaking it. It can possibly be a problem if...

potential fix: https://github.com/containers/common/pull/2108

and the vendor PR: https://github.com/containers/podman/pull/23456