Pires

I don't think systemd even does that, does it?

I just saw these in journal logs, when parsing the unit, eg ``` Unknown lvalue 'PrivateMounts' in section 'Service' ```

If the CLI does it, then maybe there's an API behind it? I'm not supportive of wrapping CLI because that's not a contract I trust in.

Here's the possible formats for Pod CPU resource requests and limits: - an integer value, such as `2` - a fraction, such as `0.1` - an integer value in millis,...

Actually, I got it wrong when it comes to systemd primitives. `CPUQuota` is the field to use and it supports percentage alone. The conversion should be trivial, though. Now, [this](https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt)...

One problem I see is that it seems that enabling accounting for one slice means parent and child slices are affected too which may not be desirable.

In my testbed, I'm outsourcing this to cert-manager, as detailed in the README.md. If you're getting ACME support maybe you could explore caddy server?

I don't think you can run cert-manager without an API server given it requires CRDs to function - cert-manager uses Kubernetes object store as its storage backend. Anyways, it seems...

But you may be missing something here. Yes, you can use your own CA for signing systemk HTTPS endpoint *but* it must be validated by the API server (there's a...

OK so your goal is to have systemk setup the CA and then bring up the API server with that CA? If yes, that's totally doable. The problem later is...