bubblewrap
bubblewrap copied to clipboard
containers
Low-level unprivileged sandboxing tool used by Flatpak and similar projects
As explained here: https://github.com/containers/bubblewrap/issues/279#issuecomment-609475553_ I document this, since it is an information I wanted when first having contact with this tool. Besides that, I had a lot of fun with...
Marked as RFC because this is not at all production ready and the whole concept might be questionable. Feedback (especially about the overall design) is very welcome. In flatpak we...
The first time PKG_CHECK_MODULES is called also checks for pkg-config. If that first call is in an optional block then later calls to PKG_CHECK_MODULES will fail. See https://autotools.io/pkgconfig/pkg_check_modules.html Section 3.4....
This is a pure cleanup patch and should not affect anything. I was gonna use it for some other work which required yet another fd argument, but that fell through.
This is a workaround for https://github.com/containers/bubblewrap/issues/198 It checks if /proc/mounts contains anything related to `hidepid`. I'm very new to C so sorry if there's anything wrong. It worked fine when...
M4sh differs from the standard sh syntax by using `AS_IF` and `AS_CASE`, it is used to know when to initialize pkg-config for example. Here, some code are using the classic...
``` This change adds an additional parameter --limit-mem VALUE, which when supplied sets the maximum size of the child process's virtual memory (address space) to VALUE megabytes. This affects memory...
When debugging things, it's really useful to be able to see from the process output which thing is which. Here, we're using the term "cinit" for the in-container init. I...
Metadata
Owner
Metadata
Low-level unprivileged sandboxing tool used by Flatpak and similar projects