Questions tagged [unshare]
The unshare tag has no summary.
44 questions
0 votes
1 answer
87 views
Relationship between CLONE_NEWUSER, `/bin/unshare` and `unshare(2)` as it relates to User Namespace
I am trying to comprehend some man7.org documentation about the User Namespace and the /bin/unshare command. I started by reading this page: https://man7.org/linux/man-pages/man7/user_namespaces.7....
- 631
0 votes
1 answer
67 views
Order of mounting of entries in a mount namespace
I'm aware of unshare -m creates a new mount namespace moving the process executing it into the new mount namespace being created. The latter gets a copy of parent's mount namespace. Indeed look at the ...
- 385
1 vote
0 answers
45 views
Isolating a child process in a remote desktop program
I'm developing a remote desktop/streaming program for linux. When a user logs in, they specify a program to launch, and the remote server launches that program as a new process. The server process ...
- 11
2 votes
2 answers
2k views
Why unshare with chroot does not isolate /dev like /proc?
I am following Container from scratch by Kevin Boone I have alpine mini root filesystem under /mnt/container/ I am a little puzzled about how the mount works with chroot and unshare involved. Without ...
- 225
2 votes
2 answers
1k views
Why is the Linux command `unshare --pid=p --mount=m` not creating a persistent namespace?
From everything I have read in the unshare and nsenter man pages, I should be able to bind-mount a directory to itself, mount --make-private the directory, and then use files within that directory to ...
- 535
0 votes
1 answer
556 views
How to login to a user namespace created by unshare?
How to login to a user namespace created by unshare -U from another terminal?
- 309
2 votes
1 answer
1k views
Unshare with overlayfs results in permission denied with su
I am trying to setup 'rootless' containers by hand, with just unshare and mounting overlayfs. Currently, I can unpack a rootfs tarball, setup a /tmp and /proc mount, and pivot_root/chroot into it ...
- 777
5 votes
1 answer
3k views
How can I use a bind mount in a network namespace?
I have an app I run in a network namespace. This works well. I want to run the app multiple times, in different namespaces. For convenience, I want to bind mount the app's working directory to ...
- 215