oci: review follow-ups (cleanup, root.readonly, tmpfs mounts, lifecycle fixes)#100

Merged

congwang-mk merged 13 commits into

mainfrom

oci-review-followups

Jun 11, 2026

Commits on Jun 10, 2026

oci: remove unused --debug CLI flag
congwang-mk
committed
oci: remove unused ExitInfo::from_status helper
congwang-mk
committed
oci: grant whole rootfs per root.readonly instead of hardcoded paths
congwang-mk
committed
oci: emulate scratch tmpfs with backing dirs, pass through proc/sys/dev
congwang-mk
committed
oci: chdir supervisor daemon to / and fix stale set_created doc
congwang-mk
committed
oci: don't wait() after a failed start() to avoid supervisor hang
congwang-mk
committed
oci: add --root flag and default state dir to XDG_RUNTIME_DIR when unprivileged
congwang-mk
committed
oci: fail fast when config.json declares a missing rootfs path
congwang-mk
committed
oci: reject create of an already-existing container id
congwang-mk
committed
oci: rename sandlock's own container terminology to sandbox
congwang-mk
committed

Commits on Jun 11, 2026