Rodrigo Campos

/retest

Are you planning to switch to the socket syscall, as I suggested, then? Let me know if you have any doubts about the flag or if I can help :)

I don't think it is needed to use the flag now. The upstream kernel commit says connect(2) when it should say socket(2). As I explained in the comment you linked...

I'm currently swamped, I don't expect to have time soon. But I'll have a look if I can :)

Thanks for the report! Given that libseccomp-golang bug and that the proper fix might be in the kernel, there might be some wordarounds we can do until that happens, is...

Talking with alban, he remembered you get a POLLHUP event on the fd: https://github.com/torvalds/linux/commit/99cdb8b9a57393b5978e7a6310a2cba511dd179b Userspace is currently not polling on this, IIRC, but that can be a solution for the...

Oooor, just rely on the host systemd to save the fds for us, using that functionality. No "inspiration", just use it! We should explore more that option (like security concerns,...

cc @alban

Hi! We are adding support for [user namespaces in Kubernetes](https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/127-user-namespaces), we are currently writing patches for containerd and CRIO. It would be great if dockershim can implement support for it...

@cyphar well, we are moving only with Phase I of the KEP now, that doesn't need volumes (we just support the simple ones, that have the same lifecycle of the...