3 ms·

This is huge, major props to cyphar and the runC folks. Congrats! The result of 11mo of dev work. Dope AF.

• cyphar 10y ago
  <3 The one thing I've really learned from all of this is just how many different things can break if you take away root privileges from a process. I'm kinda excited to see how much of cri-o and kubernetes we can make run as an unprivileged user (especially given how Cloud Foundry has already taken advantage of this).
  • SEJeff 10y ago
    And when we finally bridge the containers seriously with criu for container migrations, wow.
    • jacques_chester 10y ago
      I've been nagging anyone who will listen that this ought to be done. (Easy for me: I don't have to do it. I will of course take credit to the fullest extent the law allows.)