Rodrigo Campos

If only a binary is needed, I guess no other issues. `opt/bin` is on the PATH by default (need to `mkdir -p /opt/bin`, though). If you can install binaries to...

@alexellis sorry for the late response. Not sure I understand your question, `var/lib/` and `/opt/bin/` can be used for those things. But that was mentioned and I guess you are...

On Tue, Apr 19, 2016 at 02:39:37PM -0700, Jon Moter wrote: > Hi rata. I'm interested in doing something with ConfigMaps, but haven't looked deeply enough into them to have...

Thanks a lot! I think if you need different configurations on different datacentes, then you will need different configmaps on different datacenter (if you want to use configmaps for those...

> I'm working on an experimental secocmp notifier implementation in CRI-O right now, which right now stops a container once we hit a erroneous syscall (or we could throw metrics...

@jiangliu can't we do an abstraction like (function names are horrible in this example, of course will be changed): * `if mustPreCreateNetNS(), then create NetNS`: This is a no-op on...

I think it is not trivial to use id mapped mounts for volumes, as we need to know if the filesystems support id mapped mounts. If we just focus on...

@cyphar Thanks, I'm unsure if they are useful for k8s as proposed here (but heh, we can make future improvements when k8s uses this if needed). I'm working on a...

From the Kubernetes POV (I'm working on a KEP with @giuseppe for userns support un k8s) what will be great if: 1. The chown needed for the container base image...

> Yes, currently it is impossible to mount overlayfs on top of idmapped lowerdir. There are a patch from @brauner in Linux kernel that disables this. > > https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.15.5&id=029a52ada6a774cac457f3be34b79cfc85563ced Oh,...