3 ms·
In a shell you can do this with `unshare -prf` which will create an unprivileged user namespace (mapping only yourself -- if you want more complicated stuff you
by cyphar 8y ago
In a shell you can do this with `unshare -prf` which will create an unprivileged user namespace (mapping only yourself -- if you want more complicated stuff you'll need to use rootlesskit[1] or a shell script). Note that most programs really don't like being in an unprivileged user namespace (something the rootless-containers project has been working on fixing so you can have completely unprivileged containers in every sense of the word "just work").
[1]: https://github.com/rootless-containers/rootlesskit https://github.com/rootless-containers/rootlesskit
- Liskni_si 8y agoYou might also want to have a look at bwrap [1], a handy little sandboxing tool for unprivileged users. [1]: https://github.com/projectatomic/bubblewrap https://github.com/projectatomic/bubblewrap