2 ms·
> In particular, if you need to replace not just glibc, but also a bunch of system libraries (pretty common case for complex apps), it's often easier to unshare
by ChocolateGod 2y ago
> In particular, if you need to replace not just glibc, but also a bunch of system libraries (pretty common case for complex apps), it's often easier to unshare(CLONE_NEWNS), followed by bind-mounting over new /lib64 and /usr/lib to override specific directories. This is much lighter than full-on containers
This is basically what Flatpak does.
- synergy20 2y agois flatpak mainly designed for desktop gui? wish there are cli tools to help to develop non gui program with unshare
- voidbert 2y agoYou can use bubblewrap, the sandbox Flatpak uses. However, the command lines will get pretty long.
- ChocolateGod 2y agoYeh, exclusively. For non-gui the closest thing is Docker/Podman.