leoluk

+1 to this, have been using nff-go successfully in internal projects and Areg's help was greatly appreciated! Using Go has drawbacks for production (mainly Cgo cost) but it's amazing for...

A simple (albeit inefficient) workaround is to export a tarball using `--tarball=foo.tar --push=false` and import the resulting image into k3s/containerd using `k3s ctr images import`. Simple example usage: https://github.com/monogon-dev/NetMeta/blob/94fcccddcb03faef99ce46ea4738b5d14804ffb8/scripts/build_containers.sh#L17

> A more efficient strategy might be to just run a very simple registry implementation in-process and have `ko` act as the registry? Serializing to tarballs is annoying because you...

Figured out workaround: one can use device-local policy (i.e. managed.json) to add the extension to `ExtensionInstallBlacklist`. Disabling it that way isn't synced to the profile and only disables the extension...

Still relevant

What's the estimated bandwidth and compute requirements for running our own tile server? I'm happy to contribute resources (within reason).

> I would say even more important than being idempotent is it being a read-only operation. Most cargo commands will mutate the lockfile by default - you need to specify...