HasCapSetGID returns true if this process has CAP_SETGID.

HasCapSetUID returns true if this process has CAP_SETUID.

MapToRoot configures what UID and GID should map to root (UID/GID 0) in the user namespace in which the function will be run.

NewRunner returns a new Runner that runs functions as rootless containers.

SetUID indicates that the container runner should attempt operations that require CAP_SETUID and CAP_SETGID, for example creating a user namespace that maps arbitrary UIDs and GIDs to the parent namespace.

StdioPipes creates and returns pipes that will be connected to the supplied command's stdio when it starts.

WithCacheDir specifies the directory used for caching function images and containers.

WithLogger configures which logger the container runner should use.

WithRegistry specifies the default registry used to retrieve function images and containers.

100 MB.

How many UIDs and GIDs to map from the parent to the child user namespace, if possible.

How many UIDs and GIDs to map from the parent to the child user namespace, if possible.

A Runner runs a Composition Function packaged as an OCI image by extracting it and running it as a 'rootless' container.

Stdio can be used to read and write a command's standard I/O.

A RunnerOption configures a new Runner.