Luca Bruno

Capturing from another discussion, it is possible to build the stage0 only via: ``` ./configure --with-stage1-default-name=coreos.com/rkt/stage1-coreos --with-stage1-default-version=1.16.0 ``` and let the user retrieve an existing stage1: ``` sudo rkt trust...

@benjumanji right, proper distribution builds are self-contained, so they need to have a newer packaged systemd in order to use it for building rkt stage1. But this is a mostly...

While I don't exactly know the details behind this, it seems to be an issue with rktlet usage thus you'd better report it at https://github.com/kubernetes-incubator/rktlet. /cc @iaguis @alban who may...

Thanks for the suggestion. Yes, there are multiple alternatives to GPG-based signature verification, and I won't argue here about them. This feature however departs from [appc spec](https://github.com/appc/spec/blob/846ceefb94c79945a09d5a0d244af15647523026/spec/aci.md#image-archives) and would be...

Partially related, as per -rc5 (after https://github.com/opencontainers/image-spec/pull/561) the following are all valid refs: * "" (empty string in the value field, also different from a nil value or missing `ref.name`...

Thanks for the documentation update. However, I think that the existing doc is showing gpg1 step-by-step instructions, while you want to move this further into gpg2. I generally agree that...

This definitely makes sense, and would be a nice UX improvement. @CyBeRoni, do you want to make a try at it?

Forgot to gofmt this?

@adsri this patch is going to be merged after tests are green and review is sucessfully finished. It is milestoned to 1.29.0, so that's the intention. There isn't yet any...

For reference, this `/proc/sys/net` protection is coming from systemd-nspawn [mount_all()](https://github.com/systemd/systemd/blob/v231/src/nspawn/nspawn-mount.c#L303). It is disabled when systemd-nspawn creates its own netns, but we should introduce a way to switch it off from...