Anand Krishnamoorthi

> LGTM. For my understanding, do the replays not themselves invoke the load and unload symbol paths? I've tried to explain this in the PR description. Can you let me...

@fitzthum > 1) measuring the KBS_URI doesn't guarantee much because the CSP controls the network and could probably reroute things if they really wanted to. > 2) The KBS_URI is...

Thanks for the explanation, @fitzthum. Looking forward to the blog post. Does it mean that only encrypted images can be run with kata-cc?

@dmcgowan In our use-case, we need to customize image management for certain pods, whereas use containerd's default implementation for all other pods. To this end, currently we've written our own...

For __libc_single_threaded, see - [Detecting Single-Threaded Execution](https://www.gnu.org/software/libc/manual/html_node/Single_002dThreaded.html) - [Why glibc 2.34 removed libpthread](https://developers.redhat.com/articles/2021/12/17/why-glibc-234-removed-libpthread#the_developer_view)

@vtikoo Feel free to merge this PR if it is useful.

I don't have the original branch and I'm no longer set up to work on Mystikos. Since the changes are really small, you could submit them via a new PR.

Changes commited by #1449

@fitzthum Could you shed some light on the following in case you blog post is not yet ready? > You might think we could put the public key in the...

I also ran into this issue recently. [Rego](https://www.openpolicyagent.org/docs/latest/policy-reference/#grammar) lists the following production ``` unary-expr = "-" expr ``` which indicates that all expressions must be allowed after the `-` sign,...