4 ms·
Not to shill another blog post of ours in here, but maybe this is helpful. It's not exactly what you're asking for as it relates to running containers via runc
by kylegalbraith 3y ago
Not to shill another blog post of ours in here, but maybe this is helpful.
It's not exactly what you're asking for as it relates to running containers via runc. But this walks through how OCI layers are actually built up behind the scenes. In case it's helpful: https://depot.dev/blog/building-container-layers-from-scratch https://depot.dev/blog/building-container-layers-from-scratc...
- codethief 3y agoThanks, I had come across that post already but I find the structure of OCI images to be the easy part to understand. The tougher part is to get runc to run everything without root. :) Anyway, fortunately I seem to have found a solution for now (running runc with an overlay rootfs without root), see the link in the other sibling/nephew comment I posted.