1 |
On Fri, Sep 22, 2017 at 4:43 PM, James McMechan |
2 |
<james_mcmechan@×××××××.com> wrote: |
3 |
> |
4 |
> # now create a separate mount namespace non-persistent |
5 |
> unshare -m bash |
6 |
> |
7 |
|
8 |
If you're going to go to the trouble to set up a container, you might |
9 |
as well add some more isolation: |
10 |
|
11 |
unshare --mount --net --pid --uts --cgroup --fork --ipc --mount-proc bash |
12 |
|
13 |
I'm not sure how much of a hassle mapping a uid namespace would be or |
14 |
if it would really add anything, especially if this chroots to portage |
15 |
right away. |
16 |
|
17 |
-- |
18 |
Rich |