4 ms·
> You can even render the default network namespace barren such that any accidentally launched software has no network of any kind. This sounds extremely appea
by throw10920 4y ago
> You can even render the default network namespace barren such that any accidentally launched software has no network of any kind.
This sounds extremely appealing. Do you have any quick-start resources for this, or do we just have to read the complete documentation for Linux namespaces?
- rogers18445 4y agoIt's just a few commands using the ip tool. You can read about it here: https://www.wireguard.com/netns/ https://www.wireguard.com/netns/ Wireguard is special in that after creating a wg0 interface you can move it to another namespace and its [encrypted] packets would be teleported into the namespace it started in. The link above has the wg0 being moved into the default/init namespace but you can move it anywhere.