Tianon Gravi

@cyphar do you think this is something we'd be safe to think/discuss about post-1.0? (it sounds like it's something that'd be fine to add in a 1.1, for example)

I'm not an image-spec maintainer, but figured maybe my thoughts on this are useful (being I'm a runtime-spec maintainer and this PR might end up there too). While I agree...

I know you looked this up too, but I wanted to record my research on Go's new `-buildvcs` flag and how irritating it's going to be for us to use:...

LGTM, although I think it's useful to have it require the proper number (requires less cognitive effort to verify, so more likely to get it right consistently)

Perhaps it would help me (and other spec reviewers) if we level-set on how the feature works. Here's my current understanding -- is this accurate? > there's at most `quota`+`burst`...

IMO we can decide on the specifics of this edge case post-1.0 @crosbymichael what's your opinion on clarifying this being a 1.0 or 1.1 concern?

The organizational bits of this seem fine to me, but I feel like I'm missing something on the exact details of *what* these are, and what the specific difference is...

Sorry for the delay -- I'm honestly still very confused why this is being proposed to https://github.com/opencontainers/runtime-spec instead of being a feature of kubelet or even a standalone tool. Given...

> It's quite a departure from the Linux world of a privileged container where it's still a container in the ways we think of one. I think this is still...

Networking is definitely a complicated topic, and even if we take just the example of Docker, it has multiple methods by which it implements this one feature (and the ability...