You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
ActorTemplate's container should not use name "pause" #1495
It doesn't sound right to carve out names from the set of valid IDs (i.e. k8s-short-names). It's not just arbitrary to say all k8s-short-names are allowed, except "pause", it's also impossible to evolve as any other restriction will be backward incompatible.
Can we change the implementation of atelet / ateom so that we don't need to use that ID? (e.g. call the container "_pause" within the OCI spec).
It doesn't sound right to carve out names from the set of valid IDs (i.e. k8s-short-names). It's not just arbitrary to say all k8s-short-names are allowed, except "pause", it's also impossible to evolve as any other restriction will be backward incompatible.
Can we change the implementation of atelet / ateom so that we don't need to use that ID? (e.g. call the container "_pause" within the OCI spec).
Haven Xia (@HavenXia) looking at the code, I don't think this was fixed? Atelet seems to still have a validation that makes Run/Restore request fail if a container is named pause. I found this while reviewing #1997 which adds DV validations to this API.
Activity
juli4n commentedon Sep 7, 2026
It doesn't sound right to carve out names from the set of valid IDs (i.e. k8s-short-names). It's not just arbitrary to say all k8s-short-names are allowed, except "pause", it's also impossible to evolve as any other restriction will be backward incompatible.
Can we change the implementation of atelet / ateom so that we don't need to use that ID? (e.g. call the container "_pause" within the OCI spec).
Benjamin Elder (@BenTheElder)
HavenXia commentedon Sep 8, 2026
I agree with this. Will update PR if Benjamin Elder (@BenTheElder) 's ok with it too.
BenTheElder commentedon Sep 8, 2026
I agree. I left a comment like this on the PR.
Name the gvisor root container as "_pause" so no actor container can …
juli4n commentedon Oct 2, 2026
Haven Xia (@HavenXia) looking at the code, I don't think this was fixed? Atelet seems to still have a validation that makes Run/Restore request fail if a container is named
pause. I found this while reviewing #1997 which adds DV validations to this API.shrutiyam-glitch FYI
HavenXia commentedon Oct 5, 2026
Thanks for notifying and seems #1997 has dropped the refusal in atelet side, I will leave this open so shrutiyam-glitch you can close this with #1997.
HavenXia commentedon Oct 15, 2026
#1997 fixed this