GenerateSpec generates spec using containerd functionality.

ParseUIDGID takes the fast path to parse UID and GID if and only if they are both provided.

WithUIDGID allows the UID and GID for the Process to be set FIXME: This is a temporeray fix for the missing supplementary GIDs from containerd once the PR in containerd is merged we should remove this function.

NoProcessSandbox uses host pidns and bind-mount procfs.

ProcessSandbox unshares pidns and mount procfs.

ProcessMode configures PID namespaces.