0.29

Highlights:

All Charliecloud workflows are once again fully unprivileged end-to-end (#1415). Previously, the SquashFS workflow required a setuid executable (fusermount3) in order to initialize the FUSE mount. In 0.29, fusermount3 does not need to be setuid, and in fact Charliecloud actively suppresses its setuid bit if set. To our knowledge, Charliecloud is the first container implementation to deploy a release with a fully unprivileged SquashFS workflow.
Build cache enabled by default has been postponed to 0.30 (#1421).

Known bugs of note:

We are seeing intermittent problems with ch-run --join erroring “can’t join user namespace of pid” (#1270). Currently the workaround is to configure with --disable-syslog.

What else is new:

ch-image:
- build:
  - failed builds no longer break later builds when cache is enabled (#1405)
  - don’t crash if context directory not given (#1372)
- build-cache --reset: fix race with Git garbage collection (#1406)
miscellaneous bug fixes & improvements in:
- documentation & logging/errors (#1402)

Provide feedback