Vouch request: suchethg

[suchethg]

What do you want to work on?

I want to fix the #3890 bug. The podman rejects the sandboxes from the images with volume when the resources is on. Since it treats the images anonymous volume as unexpected. The docker already handles this right it validates and records the volume. I want to bring podman in line with the docker. For the #3895 OCSF JSON logging is enabled and silently fires the event but the log file doesn't show up on the Docker Desktop. The file open fails at the startup so the writer never gets created.

Why this change?

For the #3890 this blocks a lot of common images from running on podman even when they work fine on Docker. I would rebuild the image without volume which isn't possible or turn resource admission off which kills the security control

For the #3895 make the OCSF logging silently broken on Docker Dekstop. Even though the events are ommited nothing shows up in the log and there's no error showing up why it failed.

Checklist

• I wrote this request myself (not AI-generated)
• I have read CONTRIBUTING.md