Rodrigo Campos

FYI: We are adding support for stateful pods in k8s 1.28, the runtime part is still very simple as it just relies on idmap mounts for the ID handling. I'm...

@rodnymolina do you want to help to move this PR forward?

@IlyaHanov I'm just catching up with the discussion. Can you share one example of creating a snapshot with metacopy=On and then restoring it without metacopy that fails? I undersntad why...

@IlyaHanov oh, wow. I didn't want you to go into such big trouble, but thanks! I'd let maintainers comment on this, I'm not a maintainer here. Let's see what they...

I really wish to include this functionality in the next runc release. This is required for our userns work in Kubernetes. I'll try to make this work. If anyone has...

@AkihiroSuda Thanks! Yes, I'm working on it and I'll open a new PR in the next days. I need to start from scratch and do most things in nsenter/nsexec, so...

Opened this draft PR with an approach that works: https://github.com/opencontainers/runc/pull/3717

@neersighted thanks, that should be unrelated in a way. Here in runc we will support idmap mounts on the OCI mounts, as the runtime-spec says, and in containerd we will...

We can close this issue now that this PR is merged: https://github.com/opencontainers/runc/pull/3717

Thanks! I can't repro with that, though :( The issue really seems like the same symptom that PR https://github.com/opencontainers/runc/pull/3511 fixed, but that is in 1.1.4 and you are running with...