Paul Colomiets

Or a `!Snapshot` volume if you need temporary writable system (but be careful, it's tmpfs)

> Could there be some security limitation imposed by vagga because they are executed inside a chroot? There are some limitations of `chroot`'ed containers imposed by kernel. Usually you need...

Sure, it's strange. Firstly, `/dev` is pretty functional in container. Maybe you don't `mount --bind` it in chroot? Secondly, it shouldn't start endless loop for that (it's bug in node.js...

What does ExclFS do?

BTW, there were some issues with translating uids, gids and pids in fuse, when using user namespaces. Here is the one of them https://github.com/gittup/tup/issues/184 Maybe there are more.

> I definitely don't like special syntax for rules. Think there should be separate command for that task. I don't get it. What do you propose? "Option 2" from above?...

Okay, added few options. It looks like `2b` is my favorite now, but I'm not sure I satisfied with it.

I think `isolate-network` is fine for config. Just `isolate` can mean anything. For the command-line, I'd add `--no-network` and `--no-net` as the aliases for `--isolate-network`, because the latter is just...

Hi, You can't run existing docker images "by name" in vagga. But you don't have to build by vagga. You can do run "docker export" to save a file with...

Something along the lines of: ``` containers: fedora: setup: - !Tar url: ./fedora.tar path: / ```