Samuel Karp

Results 341 comments of Samuel Karp

> create a base jail with its root set to / I'm not sure how much of a risk that would be on FreeBSD but it's something I'd generally avoid...

> I am _really_ nervous about anything involving nested jails because you need to be very careful to avoid jail escapes when you use nested jails. There are a bunch...

@dfr is correct; CNI support should be in the caller of runj rather than runj itself. containerd supports CNI plugins in its CRI implementation today. runj needs to support the...

In #32 I've added a mechanism for runj to model FreeBSD extensions to the runtime spec and added a couple networking-related settings using that mechanism. The end result is that...

@dfr Thanks, that's an interesting approach. I think it's reasonable as a prototyping mechanism that we could add to runj, but probably not something I think would be appropriate to...

Amazon ECR's [UploadLayerPart API](https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_UploadLayerPart.html) is similar to S3's upload-part API. > The server could act as some receiver of the requests, parsing them and forwarding then to Minio (or the...

Hi @jdolitsky! From my reading of the [charter](https://github.com/opencontainers/tob/blob/main/CHARTER.md), [§ 5](https://github.com/opencontainers/tob/blob/main/CHARTER.md#5-technical-developer-community) (which discusses the TDC and maintainers) and [§ 6](https://github.com/opencontainers/tob/blob/main/CHARTER.md#6-technical-oversight-board-tob) (which enumerates the TOB's role and limits) would both need to...

I didn't know about Cirrus, but that looks like a good possibility. I've also opened https://github.com/containerd/zfs/issues/45 to track porting the unit tests, since right now they're Linux-only.

User-defined networks are not yet supported on the task definition. Can you help us understand what you'd intend to use them for? Are you looking for something like service discovery,...

@elasticsearcher We're currently working on the ability to attach an ENI to a task and use native VPC networking. We believe that this will address many of the use-cases described...