Embed Notice

@lanodan it depends on a lot of configuration things (e.g. your file descriptor limit...)

it's important mainly because bwrap can help you pretend you're a certain uid/gid, but as soon as you need to e.g. chown to other uids, assign suid bits, xattrs, and capabilities, bwrap will not help you

fakeroot does because it wraps these calls and records it all internally (and since apk mkpkg is invoked within the same fakeroot env as e.g. these chowns, it can access that)