-
Notifications
You must be signed in to change notification settings - Fork 11
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Spin on stderr while an image is pulling, instead of a minute of silence
enhancementNew feature or requestNew feature or requestStatus: Open.The guest user cannot read a bind mount owned by the host user on the runc shim
P2Real, bounded, not urgentReal, bounded, not urgentStatus: Open.#305 In brig-sh/brig;Ship signed bundles, persistent sessions and run budgets
enhancementNew feature or requestNew feature or requestepicUmbrella issue coordinating several othersUmbrella issue coordinating several othersP2Real, bounded, not urgentReal, bounded, not urgentsecurityTouches a trust boundary, a credential path, or a published safety claimTouches a trust boundary, a credential path, or a published safety claimStatus: Open.#304 In brig-sh/brig;Broker a small set of tools, with bounded approvals
enhancementNew feature or requestNew feature or requestepicUmbrella issue coordinating several othersUmbrella issue coordinating several othersP2Real, bounded, not urgentReal, bounded, not urgentsecurityTouches a trust boundary, a credential path, or a published safety claimTouches a trust boundary, a credential path, or a published safety claimStatus: Open.#303 In brig-sh/brig;Make egress enforceable on each backend, and broker credentials
enhancementNew feature or requestNew feature or requestepicUmbrella issue coordinating several othersUmbrella issue coordinating several othersP1Blocks daily use, scripting, or recoveryBlocks daily use, scripting, or recoverysecurityTouches a trust boundary, a credential path, or a published safety claimTouches a trust boundary, a credential path, or a published safety claimStatus: Open.#302 In brig-sh/brig;Add the change review workflow, and a durable run journal
enhancementNew feature or requestNew feature or requestepicUmbrella issue coordinating several othersUmbrella issue coordinating several othersP1Blocks daily use, scripting, or recoveryBlocks daily use, scripting, or recoverysecurityTouches a trust boundary, a credential path, or a published safety claimTouches a trust boundary, a credential path, or a published safety claimStatus: Open.#301 In brig-sh/brig;Prove the boundary claims, and ship a versioned plan
enhancementNew feature or requestNew feature or requestepicUmbrella issue coordinating several othersUmbrella issue coordinating several othersP0Blocks a public safety claim or a first runBlocks a public safety claim or a first runsecurityTouches a trust boundary, a credential path, or a published safety claimTouches a trust boundary, a credential path, or a published safety claimStatus: Open.#300 In brig-sh/brig;Define the runtime contract for persistent exec sessions
enhancementNew feature or requestNew feature or requestP2Real, bounded, not urgentReal, bounded, not urgentsecurityTouches a trust boundary, a credential path, or a published safety claimTouches a trust boundary, a credential path, or a published safety claimStatus: Open.#299 In brig-sh/brig;Record a runtime-reported budget stop apart from a guess
enhancementNew feature or requestNew feature or requestP2Real, bounded, not urgentReal, bounded, not urgentsecurityTouches a trust boundary, a credential path, or a published safety claimTouches a trust boundary, a credential path, or a published safety claimStatus: Open.#298 In brig-sh/brig;Add a task budget to a run, and say what enforces it
enhancementNew feature or requestNew feature or requestP2Real, bounded, not urgentReal, bounded, not urgentsecurityTouches a trust boundary, a credential path, or a published safety claimTouches a trust boundary, a credential path, or a published safety claimStatus: Open.#297 In brig-sh/brig;Report which resource budgets a runtime can enforce
enhancementNew feature or requestNew feature or requestP2Real, bounded, not urgentReal, bounded, not urgentStatus: Open.#296 In brig-sh/brig;Sign the chain head, and store a checkpoint off this host
enhancementNew feature or requestNew feature or requestP2Real, bounded, not urgentReal, bounded, not urgentsecurityTouches a trust boundary, a credential path, or a published safety claimTouches a trust boundary, a credential path, or a published safety claimStatus: Open.#295 In brig-sh/brig;