== security-review fixes, red-proofs
-- F1: the image/start binding removed
--- FAIL: TestAdmit_TheAllowedSettingIsBoundToItsImageAndStart (0.00s)
    --- FAIL: TestAdmit_TheAllowedSettingIsBoundToItsImageAndStart/another_image (0.00s)
    --- FAIL: TestAdmit_TheAllowedSettingIsBoundToItsImageAndStart/added_entrypoint (0.00s)
    --- FAIL: TestAdmit_TheAllowedSettingIsBoundToItsImageAndStart/added_command (0.00s)
-- F2: Resolve ignored
--- FAIL: TestAdmit_ASymlinkOutOfARootIsOutside (0.00s)
-- F3: the later classes removed
--- FAIL: TestAdmit_TheLaterClasses (0.00s)
    --- FAIL: TestAdmit_TheLaterClasses/provider (0.00s)
    --- PASS: TestAdmit_TheLaterClasses/post_start (0.00s)
    --- PASS: TestAdmit_TheLaterClasses/cgroup_parent (0.00s)
    --- PASS: TestAdmit_TheLaterClasses/runtime (0.00s)
    --- FAIL: TestAdmit_TheLaterClasses/gpus (0.00s)
    --- PASS: TestAdmit_TheLaterClasses/device_request (0.00s)
-- F4: any /mnt/ path a root again
--- FAIL: TestAdmit_ARootElsewhereUnderMntIsNoRoot (0.00s)
== restored
ok  	gitea.dooplex.hu/admin/felhom-controller/internal/privpolicy	0.137s
ok  	gitea.dooplex.hu/admin/felhom-controller/internal/sync	0.388s
ok  	gitea.dooplex.hu/admin/felhom-controller/internal/stacks	0.236s
