Superpowered bootstrap containers

[pauldraper]

What I'd like:

I would like superpowered bootstrap containers for initialization.

Any alternatives you've considered:

Instead, I run the container as a host container, run the initialization code, then

apiclient set host-containers.example.enabled=false

This has multiple downsides: (1) I need to include apiclient in the host container and (2) I can't interrupt the boot on error.

---

While there are security concerns with superpowered containers, these concerns are not any higher for bootstrap containers than host containers.

[koooosh]

Hey @pauldraper , thanks for cutting this issue. We can consider this as a feature request, but first wanted to understand your use case.

What initialization code are you running which requires more privilege than the permissions currently granted to bootstrap containers?