alexperevalov

Support Id mapped mounts for shared volumes

10

This pull request adds support for id map mount feature for shared volumes. For rootfs this is already implemented in https://github.com/containerd/containerd/pull/5890. Both commit has a code in common, which should...

RFC: Set arbitrary uid gid in user namespace

2

Currently in case of rootless scenario which implies usernamespace creation. The only one user inside user namespace which is allowed - it's root user. But for scenarios with higher level...

Ambient capability

13

This PR adds support for ambient capability. The ambient set is provided by newly introduced field `add_ambient_capabilities` of CRI in [PR](https://github.com/kubernetes/kubernetes/pull/104620) The whole idea was discussed in [KEP](https://github.com/kubernetes/enhancements/pull/2757) Fixes: https://github.com/containerd/containerd/issues/5644

Support IPv6 in address assignment and gateway

5

Rootlesskit assigns ipv4 address and routes for ipv4, but not for ipv6, this PR address IPv6 issue. Some tools like slirp4netns could assign ip address, routes, but rootlesskit doesn't request...