Markus Rudy

> Hi @burgerdev A new version of proto has been updated. PTAL Great, I like this version - thanks a lot!

Oh, I believe this may actually be #9071.

I got another persistent occurrence in https://github.com/kata-containers/kata-containers/actions/runs/19262930389?pr=12068. Interestingly, I can reproduce this unauthenticated: ```console $ curl -fsSL https://api.github.com/repos/kata-containers/kata-containers/actions/runs/19262930516/jobs?per_page=100&page=1 curl: (22) The requested URL returned error: 502 ``` But not with...

> I've created [#12082](https://github.com/kata-containers/kata-containers/pull/12082), but as I said - I'm not sure this will solve the issue we are hitting. Thanks, and I agree that this is unlikely to be...

I think I found the problem: Github has a timeout of 10s on API requests[^1], and we're very close to that timeout: Bad run: ```console $ time gh api /repos/kata-containers/kata-containers/actions/runs/19262930516/jobs?per_page=100&page=1...

> 3. @burgerdev mentioned in https://github.com/kata-containers/kata-containers/pull/9955/files#r1712214089 > > Now I genuinely wonder whether the spec deals with both the file and a whiteout marker in the same layer... I found...

We also need to check for deletion of the entire `/etc` directory: https://github.com/opencontainers/image-spec/blob/e72ae99d5fc74e7f7f8e320a44f76968da86a545/layer.md?plain=1#L287.

I don't think we're done yet: The whiteout precedence from https://github.com/kata-containers/kata-containers/issues/10290#issuecomment-2342807618 is not yet implemented: https://github.com/kata-containers/kata-containers/blob/38a28b273af4b38ed80a69c7b0dea8269b35f30e/src/tools/genpolicy/src/registry.rs#L568-L573 And we don't yet check for parent dir deletion (https://github.com/kata-containers/kata-containers/issues/10290#issuecomment-2342833507). The group from the...

@manuelh-dev: I think we're pretty certain at this point that Nydus guest pull is the root cause of the issue. With Nydus in proxy mode, the image layers are _usually_...

Hey @guytonde, great that you're looking into this! What I have in mind: 1. New `kata-ctl` flag for headless execution: ```sh kata-ctl exec --interactive=false $POD -- bash -c "foo; bar;...