4 ms·
Same question. One thing I really dislike in Bubblewrap is that I must share the whole net user namespace even if all I want to do is use UNIX domain sockets.
by BoingBoomTschak 2y ago
Same question. One thing I really dislike in Bubblewrap is that I must share the whole net user namespace even if all I want to do is use UNIX domain sockets.
Since I only see net options specifying ports, does this handle this use case?
- coppsilgold 2y ago> if all I want to do is use UNIX domain sockets I routinely --unshare-net with UDS ro-binds. You may be using abstract sockets (@/path/uds.sock) and those do require the same netns I think.
- l0kod 2y agoLandlock supports scoped abstract UNIX socket: https://docs.kernel.org/userspace-api/landlock.html#ipc-scoping https://docs.kernel.org/userspace-api/landlock.html#ipc-scop... Landlock doesn't use namespaces, they are orthogonal.