zhangguanzhang

``` ┌──────────────────────────────────────────────────────────────┬────────────────┬──────────┬──────────┬─────────────────────┬─────────────────────────────┬─────────────────────────────────────────────────────────────┐ │ Library │ Vulnerability │ Severity │ Status │ Installed Version │ Fixed Version │ Title │ ├──────────────────────────────────────────────────────────────┼────────────────┤ │ ├─────────────────────┼─────────────────────────────┼─────────────────────────────────────────────────────────────┤ │ github.com/hashicorp/go-retryablehttp │ CVE-2024-6104 │ │ │ 0.7.4...

I looked at the source code and found that the -w option is used to obtain the lock when using iptables. The problem is that other processes have obtained the...

kube-proxy and kubelet

Please note that 256-260 https://github.com/kubernetes/dns/blob/fa0192f004c9571cf24d8e9868be07f57380fccb/cmd/node-cache/app/cache_app.go#L241-L260 in line 260 goto L208 https://github.com/kubernetes/dns/blob/fa0192f004c9571cf24d8e9868be07f57380fccb/cmd/node-cache/app/cache_app.go#L205-L208 need Increase the time of `c.params.Interval`

@bradfitz PTAL, this will useful for multi server of headscale

@akerouanton PTAL

cri-dockerd will modify the resolv file after the container start and don't chang the `.hash` file, just like a human would manually modify it. https://github.com/Mirantis/cri-dockerd/blob/ae86616c05596815591c57feaa3624d544c4b453/core/sandbox_helpers.go#L344-L384 Therefore, my pull request will...

> > In your repro, you're docker restarting a container created and managed by k8s. Why? > > [@zhangguanzhang](https://github.com/zhangguanzhang) Could you please explain why you're `docker restart`ing a container created...

> > We have some functions that use api to restart all containers of pod, and then we find that docker has this problem > > That's unconventional. Why use...

@akerouanton @thaJeztah ping