• Mask over the /sys/fs/selinux in mask branch
• chroot: do not use setgroups if it is blocked
• chroot, run: not fail on bind mounts from /sys
• Allow "readonly" as alias to "ro" in mount options
• Add VFS additional image store to container
• Ignore OS X specific consistency mount option
• vendor golang.org/x/text@v0.3.3
• Cirrus: Fix missing htpasswd in registry img
• Switch scripts to use containers.conf
• Make imagebuildah.BuildOptions.Architecture/OS optional