Nicolas Lacasse

`faccessat2` is already implemented in VFS2: https://github.com/google/gvisor/blob/master/pkg/sentry/syscalls/linux/vfs2/vfs2.go#L166 VFS2 is enabled by default in almost all environments, but is still rolling out to Cloud Run. Hopefully that rollout will finish soon.

`MSG_CMSG_CLOEXEC` is only a flag for `recvmsg`. I'm not sure why it is being set on `sendmsg`.

Interesting find! This is a tricky one because when you pass `-t` into podman (or Docker), gvisor will "donate" the terminal FD from the host into the sandbox. The donated...

> > I believe this is the error we are hitting: > > https://elixir.bootlin.com/glibc/glibc-2.41.9000/source/sysdeps/posix/ttyname_r.c#L89-L91 > > That doesn't involve `ioctl`, so I think it's somewhere else? I was looking at...

That error from `make` seems to be caused by newer versions of make (4.4+). It should be fixed by #11084.