Containerise - run spikes on outer and inner containers - #4

Merged

neuromaxer merged 16 commits into

mainfrom

containerise-p1

Jun 12, 2026

Commits on Jun 11, 2026

add containerisation plan
neuromaxer
committed
a4b57b0
add podman spike files
neuromaxer
committed
5fdae2a
spike: record host facts (Ubuntu 26.04, kernel 7.0, apparmor userns restriction active)
stage0 spike agent
committed
2c1bcf7
update spike brief
neuromaxer
committed
a0ea365
≈Merge branch 'containerise-p1' into stage0-spike
stage0 spike agent
committed
209bf02
spike: fix newuidmap via file-caps (setuid-root failed CAP_SYS_ADMIN check)
stage0 spike agent
committed
b3e2e53
spike: full nested chain green (12/12 smoke pass)
stage0 spike agent
committed
76ef5c4
spike: clear crun runtime state on boot so 'podman start --all' recovers inner containers after docker restart (Stage 4 recovery mechanism)
stage0 spike agent
committed
9e0442c
spike: T4 pin native rootless overlay, drop --device /dev/fuse
stage0 spike agent
committed
7a19d72
spike: T2 minimise flags — tailored seccomp profile replaces unconfined
stage0 spike agent
committed
2c7f8f4
spike: T2 outer-runtime sub-question + complete SPIKE-FINDINGS.md
stage0 spike agent
committed
a5f130c
spike: update run-outer.sh header (candidate -> final proven set, T2 complete)
stage0 spike agent
committed
5011ed0

Commits on Jun 12, 2026