mrunalp

5 ms·

1. 1.▲
   by mrunalp 8y ago

   Buildah gives you access to the workdir for the build so you can do interesting things like copy or rsync your build artifacts into your container. Check out the example here - https://github.com/umohnani8/Demos/bl
2. 2.▲
   by mrunalp 10y ago

   If you enable user namespaces as well, then you don't need any of that. For example: [mrunal@local rootfs]$ id uid=1000(mrunal) gid=1000(mrunal) groups=1000(mrunal),10(wheel) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c
3. 3.▲
   by mrunalp 10y ago

   The kubernetes pods share ipc and network namespaces (and pid soon). You may be referring to mount namespace by volumes namespace. The mount namespace is the minimum that distinguishes one container from the other as that's the mean by
4. 4.▲
   by mrunalp 10y ago

   The OCI runtime-spec is very close to 1.0. We are just using the rc version for now.