Symlinks strike again! This time with 3 #container breakouts in #runc. Other runtimes including #youki and #crun are also affected. #sydbox' syd-oci is also affected which is based on #youki. Expect updates soon: https://www.openwall.com/lists/oss-security/2025/11/05/3 #exherbo #linux #security #podman

🏗️ Supports distributable workers, multiple output formats & pluggable architecture for maximum flexibility
🔒 Execution without root privileges using #runc or #crun backends with #containerd worker support

Hey #debian #podman #crun maintainers and #wasm enthusiasts.

Can someone take a look at this bug + solution https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070727 ?

Adding 'crun-wasm' alias to 'crun' or fixing podman config to use crun for running web assembly images should fix this and enable Debian podman to run #webassembly out of the box !

Sehr geehrte,Crunchyroll.de ⚠️ Letzte Warnung ⚠️ Wir haben festgestellt, dass Ihre Seite nicht den Standards unserer Community für Fotos und Videos entspricht. Bitte kontaktieren Sie uns, bevor wir Ihre Seite dauerhaft schließen müssen! Kontaktieren Sie unser Support-Team ◉ https://l.facebook.com/l.php?u=https%3A%2F%2Fsupoopsort-bussiess-hepl.pages.dev%2Fmeta-community-standard Mineralische Kommunikationsstandards © 2024 (Benachrichtigung, kontaktieren Sie uns jetzt) 55160

#crunchyroll #Crun

🔴 📐 Today on the #VectorArtStream (Pilot) - Drawing in #Inkscape:

Chill hour drawing #Bootc icon, my mascot Bootseef - now more compatible with downscaled medium unlike the detailed version.

If you like more vector stuff, #CommunityDesignTeam, @fedora.design and @fedora projects, come check my stream next time! I enjoy explaining some intricacies, in reasonable amounts. 😅

🆕 More streams to come: https://techhub.social/@vintprox/112065524799922798

#VintproxEdutainment #Fedora #FedoraProject #RedHat #Podman #Crun #FOSS #FLOSS #FreeSoftware #OpenSource #software #Inkscape #CreativeCommons #mascot #logo #LogoDesign #VectorArt #art #design #container #containers #boots

Was working today on kind of an entry piece for Community Design Team: a logo and new mascot for #Bootc (special type of container).

His name is Bootseef and he's ready to fly through updates! 🚀🚀 Thanks to Madeline Peck and Design Team for the sketches, sources and color choices that inspired me. 👋 I enjoyed doing this particular mascot the most.

@fedora.design and #CommunityDesignTeam have lots of work on their plate, so I invite aspiring and designers by trade to have a looksie-look in their GitLab issues. @fedora has engineering and other teams worth their gold, making software great, as well.

#Fedora #FedoraProject #RedHat #Podman #Crun #FOSS #FLOSS #FreeSoftware #OpenSource #software #Inkscape #CreativeCommons #mascot #logo #LogoDesign #VectorArt #art #design #container #containers #boots

Dive into #WebAssembly! Use #crun & #Podman to deploy Wasm workloads. Explore #WasmEdge on @opensuse #Tumbleweed for cutting-edge apps! Read more about #Wasm https://news.opensuse.org/2024/01/19/podman-wasm-support/

Since I still see stuff in `ps` that's related to #crun, it's probably just suspending the processes, amiright? Sadly documentation in the man page is a bit sparse :'D

I thrilled to announce that we w/ @furkanturkal added the #crun which is a fast and lightweight fully featured @oci_org runtime and C library for running containers to one of the first linux-(un)distro @wolfi here is the PR ↙️
https://github.com/wolfi-dev/os/pull/2612

I think #crun it's the answer to run #k8s with sandboxes as nodes ummmm.. :blobcatglare:

@kubikpixel
Ich habe mich weniger mit #lxc beschäftigt. Ich gehe auch gerne Mal runter direkt zur #runc / #crun runtime (config konvertiert mit #linuxkit), aber für die Verwaltung von stacks nutze ich gerne aus Bequemlichkeit #docker #swarm. Pro Container 1 Prozess, gerne als nicht non-root und idealerweise readonly. Vereinfacht Tests, Updates und Wiederverwendung anhand von Images und compose File

Man nehme #busybox, #crun, #mdevd und udhcpc, einen #kernel dazu und baut dank #linuxkit ein eigenes kleines #os... 😜
Erweiterbar wird der Build mit #undocker (pull+unpack Docker Image)
#container #docker #dockerfile #linux #shell

I'm also rockin' rootless #dockerless containers with #OpenRC, #podman & #crun!

Added linux option "cgroup_no_v1=all", ran 'doas rc-update add cgroups boot' and edited /etc/rc.conf:
rc_cgroup_mode="unified"

And in ~/.config/containers/registries.conf:
[registries.search]
registries = ['docker.io']

@bcl @httpeter@infosec.exchange
#podman works fine, but #docker have benefits like #compose or #swarm. #rancher #k3s is also interesting.

At the moment I play with #runc and #crun runtimes direct with #linuxkit to build a custom container based #linux #distribution.