Syx

build image fail in linux/arm64

5

### Description when i try to do the test of TestBuild ,it alway failed，and exitcode is 1.This is the log print(i add the log).There is lot of test failed when...

"failed to call cni.Setup: plugin type=\"bridge\" failed (add): running [/usr/sbin/iptables "

1

```bash > nerdctl --namespace=nerdctl-test run --rm --net host myregistry.domain.com:5001/stargz-containers/alpine:3.13-org > > nerdctl --namespace=nerdctl-test ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES c9c847257348 myregistry.domain.com:5001/stargz-containers/alpine:3.13-org "/bin/grep shm /proc…" Less than...

[CentOS 7] nerdctl run failed.failed to call cni.Setup: plugin type=\"bridge\" failed (add): running (`iptables v1.8.7 (nf_tables): RULE_APPEND failed (Invalid argument): rule in chain POSTROUTING\n"`)

4

centos7 ### Description ```shell > nerdctl --namespace=nerdctl-test run --rm --net host myregistry.domain.com:5001/stargz-containers/alpine:3.13-org > > nerdctl --namespace=nerdctl-test ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES c9c847257348 myregistry.domain.com:5001/stargz-containers/alpine:3.13-org "/bin/grep shm...

CGO Binaries compiled without Stack Protection

6

### Description Good day, It appears that docker-tools binaries which import c code are built without Stack Protection. Some local vulnerability scanners attempt to detect binaries that are compiled without...

Static build binary contained the pkcs11 package dlopen

2

When I try to compile cri-o and podman as statically linked binaries, I get the following warnings. Is there a way to avoid using dlopen or disable it? ```bash root@syx:~/go/cri-o#...

Making static binaries problem

2

Hi~ I've encountered some issues while compiling conmon and I'm seeking a resolution. I wish to compile conmon as a statically linked binary so that it can be used in...

container create failed: sd-bus call: Cannot set property CPUQuotaPeriodUSec, or unknown propert

8

crun start container failed ```bash kubectl describe pods -n default my-pod 126: Warning Failed 5m4s (x12 over 7m16s) kubelet Error: container create failed: sd-bus call: Cannot set property CPUQuotaPeriodUSec, or...

Static build warning: Is the compiled binary truly statically linked?

5

### What happened? I want to compile cri-o into a statically linked binary, but there are some warnings. The resulting statically linked binary still depends on the glibc library on...

When I use the `container-storage check` to inspect the image, it falsely reports corrupted images and even changes the inode of the file contents in the image storage root directory....

NPD with custom plugins can spawn zombie processes

6

Custom plugins may spawn zombie processes, such as: ```bash # in NPD container Z Wed Nov 30 23:38:18 2022 netwo 1221841 Z Wed Nov 30 23:38:46 2022 netwo 1223132 Z...