Ruben Jenster

Add user namespace support for systemd containers

1

Running containers with `systemd` as init system currently requires `privileged:true` to be set in the containers SecurityContext. The container will by default run in the user namespace of the host....

runtime: Implement POSIX platform hooks

1

Implement and test `POSIX platform hooks` defined by the runtime spec. https://github.com/opencontainers/runtime-spec/blob/master/config.md#posix-platform-hooks Most of the OCI hooks could probably simply be mapped to the lxc` CONTAINER HOOKS` (`man lxc.container.conf`).

cri-o OCI runtime interface needs clarification

1

Clarify what runtime version / cmdline interface is actually used by cri-o. There are two OCI runtime specifications. ### Runtime and Lifecycle * https://github.com/opencontainers/runtime-spec/blob/master/runtime.md This is the `simple` version, which...

Deploying `cilium` fails with > ERROR conf - conf.c:dropcaps_except:2451 - Unknown capability perfmon # Workaround Disable capabilities support by setting`CRIO_LXC_CAPABILITIES=false` in `/etc/default/crio-lxc` # Problem `Cri-o` requests capablities that are unknown...

Add STDIN support to `tsz`

1

Is it possible to add **STDIN** support to `tsz` ? I would like to do the following: ``` dmesg | tsz --stdin dmesg.txt ``` Currently you would have to write...