The seccomp filters are tailored for the Firecracker musl build. We should specify how to run Firecracker when building it with gnu as well.

Requested by @rbrasga in firecracker-microvm/firecracker#1515 (comment)

Some documentation could be improved by adding some options to runsc spec to allow users to specify the command and some other common OCI options. This could also improve the getting started experience for folks who are kicking the tires with runsc.

I'm thinking of the following options:

• Option to specify the command
• Option to specify working directory
• Option to specify network names

I'd like to use this issue as a tracking issue for filling out gaps in wasmtime's introductory documentation. This includes our book (rendered), API documentation (rendered), and [examples](https://github.com/bytecodeallianc

After merging #3856 one unit test class, TypeRegistryTest, intermittently stalled during local testing. It may be fine on some OSes or in Jenkins, but oddly it stalled even with the @Ignored annotation added to the tests. It would be good if a few different people to re-enable those tests and run them locally several times (one at a time, all three at once, etc) and make sure they don't stall

C strings sighted in:

• data/Shaders.h
• data/IntroText.h
• src/simulation/StorageClasses.h
• src/simulation/Simulation.cpp
• src/Format.cpp
• src/lua/socket/socket.lua.cpp
• src/lua/LuaLuna.h
• src/lua/LuaCompat.c
• src/lua/LuaScriptHelper.h
• src/lua/LuaCompat.h
• src/lua/LuaScriptInterface.cpp
• src/lua/LuaBit.cpp
• [ ]

Sandboxed API should build/work on all major Linux distributions.
We should provide at least some basic instructions for distributions other than Debian/Ubuntu:

• Fedora
• Arch Linux
• openSUSE
• Gentoo
  This also applies for their derivatives (CentOS, Manjaro, etc.)

The documentation at https://neil.fraser.name/software/JS-Interpreter/docs.html does not mention nativeToPseudo, pseudoToNative, setValueToScope, etc. These should probably be documented, with simple examples.

It seemed like it was written in docs that proot development is halted.. However, some forks are still in active development, it might be worth looking at code of repos such as termux/proot for potential improvements.

Also, is it possible to provide junest as an app for Android? It seems it can be helpful in terms of project funding, by keeping some addons for small price, say like a donation v

https://github.com/Revolutionary-Games/Thrive/blob/bf37ff573abcdafe05017db82999c9669449d83c/src/microbe_stage/Spawners.cs#L127

...the same way we do during self-testing after #545.

right now you can specify zone/project/cloud etc as flags or in config.json - i'd imagine the common case for most people is that these settings prob. don't change that much and we should have a default in ~/.opsrc

Support is currently pretty limited. On the todo list are:

• support for targeted mappings via MREMAP_FIXED
• support for file-backed mappings (which should "just work")
• support for heap mappings (alloc'd via brk rather than mmap) and low memory/32-bit mappings (p->virtual32)
• support for remapping ranges that cover multiple adjacent mappings (currently we return -EFAULT if you sp