Rootless Docker cannot run in an Apple Container bottle: the runtime's
capability bounding set omits CAP_SYS_ADMIN, which the kernel requires
to write a multi-range uid_map via newuidmap. Every other prerequisite
(setuid bit, subuid ranges, initial userns, no nosuid, no seccomp) was
already correct, so this is not a packaging gap we can close.
Also records two defects found while validating the podman alternative:
- a large download OOM-kills the shared egress proxy, which buffers
whole response bodies to scan them; the gateway is a per-host
singleton with no restart-on-death, so one bottle's pull removes
egress for every bottle
- registry auth collides with the proxy's unconditional Authorization
strip, measured: a valid bearer token behaves exactly like sending
none
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GnMp8SUGH57hZX7192Rv2F
