xibz

- [ ] runtime should not block setting host name with unconfined seccomp and SYS_ADMIN - [ ] should support seccomp unconfined on the container - [ ] should support...

- [ ] should enforce a profile blocking writes - [ ] should fail with with an unloaded profile - [ ] should enforce a permissive profile

- [ ] runtime should support that ReadOnlyRootfs is false - [ ] runtime should support Privileged is true - [ ] runtime should support RunAsUser - [ ] should...

- [ ] runtime should support running PodSandbox - [ ] runtime should support stopping PodSandbox - [ ] runtime should support removing PodSandbox

- [ ] should support safe sysctls - [ ] should support unsafe sysctls

- [ ] runtime should support HostNetwork is false - [ ] runtime should support HostIpc is true - [ ] runtime should support ContainerPID - [ ] runtime should...

- [ ] runtime should support exec with tty=false and stdin=false - [ ] runtime should support portforward - [ ] runtime should support portforward in host network - [...

- [ ] with 'rslave' should support propagation from host to container - [ ] mount with 'rshared' should support propagation from host to container and vice versa - [...

The SDK should provide a way for an s3.S3 client to strip out bucket names out of the client. This will clean up the pre-signed URL and make them more...

The jailer currently supports a naive approach to sharing files in its root drive which is hard linking. We want to move away from this and support bind mounting of...