Jorge Prendes

Set network namespace in the container

3

From all the namespaces specified in the container spec, `youki` only sets the `user` and `pid` namespaces. Other namespace, like the `nerwork` namespace, are ignored. See https://github.com/containerd/runwasi/pull/364 and [this slack...

xx-cargo: fix vendor for pkg-config and clang

5

This should fix #107 .

`xx-cargo` fails with crates using `pkg-config` in build scripts

1

The following Dockerfile fails to build when target platform != build platform: ``` # syntax=docker/dockerfile:1 FROM --platform=$BUILDPLATFORM tonistiigi/xx:1.2.1 AS xx FROM --platform=$BUILDPLATFORM rust:1.69.0 AS base COPY --from=xx / / RUN...

Running complex code after the process is `clone`d in `libcontainer` can lead to UB

9

> @utam0k calling setgroups / setresgid / setresuid directly would workaround the issue. > I am slightly concerned because in normal youki / runc, we soon call execve, which starts...

[ci] sporadic failure on `test_delete_after_create`

1

I've seen the following failure a few times. ``` Error: io error: at /sys/fs/cgroup/test: could not delete Caused by: test wasmedge_tests::test_delete_after_create ... FAILED 0: io error: at /sys/fs/cgroup/test: could not...

Sorry, in #113 I missed updaring the table in the wasmedge-sys crate's doc.

> Just bear in mind that the env-vars you are parsing are those in the container spec, and not those of the shim. > Also the plugin is loaded from...