Rootless container checkpoint/restore in CRIU without CAP_SYS_ADMIN

I've been working on rootless container checkpoint/restore in CRIU and wrote up some notes on the prototype, major failures, and the path toward the current implementation. Would appreciate any feedback, criticism, and corrections, especially from people familiar with CRIU, Podman, or container runtimes. submitted by /u/Ok-Job3177 [link] [留言]