You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I've written gojail as a tool for both runj & the Docker port that I'm working on. As we've talked about integrating gojail with the runj repo seems like the best step forward to evolve both.
As of now gojail is implemented in pure go, using the standard FreeBSD syscalls and simple parsing of jail parameters. Implementing via cgo, using only the libc jail syscalls or additionally also using libjail seems trivial and can be done if the consensus goes in that direction.
TODO (missing/uninplemented in gojail):
-proper validation of jail parameters, either via a static configuration or dynamically via pulling in the syscall mibs
-implementation of the RunIn command, I'm still on the fence on how to properly do this. One direction I think might be worth exploring is simply returning an exec.Cmd wrapping the supplied command with /usr/sbin/jexec, if golang/go#46259 makes it we could then via go version build tags drop the jexec
PR will follow
The text was updated successfully, but these errors were encountered:
I've written gojail as a tool for both runj & the Docker port that I'm working on. As we've talked about integrating gojail with the runj repo seems like the best step forward to evolve both.
As of now gojail is implemented in pure go, using the standard FreeBSD syscalls and simple parsing of jail parameters. Implementing via cgo, using only the libc jail syscalls or additionally also using libjail seems trivial and can be done if the consensus goes in that direction.
TODO (missing/uninplemented in gojail):
-proper validation of jail parameters, either via a static configuration or dynamically via pulling in the syscall mibs
-implementation of the RunIn command, I'm still on the fence on how to properly do this. One direction I think might be worth exploring is simply returning an exec.Cmd wrapping the supplied command with /usr/sbin/jexec, if golang/go#46259 makes it we could then via go version build tags drop the jexec
PR will follow
The text was updated successfully, but these errors were encountered: