ningmingxiao
ningmingxiao
I think it should be the random value,the hackers can't predict the SElinux labels,making the system more secure. I find max=1024 https://github.com/SELinuxProject/selinux-notebook/blob/c8de690a2a4799690c5fde03373d42cd52d76a46/src/notebook-examples/embedded-policy/reference-policy/build.conf#L73
yes, return an error is necessary. pr https://github.com/opencontainers/selinux/pull/246 works well. If we want to use Sequential ID to speed up we can create another pr. People have less chance to...
https://github.com/containerd/nerdctl/pull/4639 will fix
@lingdie new nerdctl version will auto download lost blobs