Dangerzone on OpenBSD

[develorer]

Does it seem feasible to run dangerzone on OpenBSD?

I realize there is no current release to do it. But I am open to try doing the work needed.

The biggest holdup I see is the container problem, as OpenBSD does not support Docker containers. Maybe one could use vmm/vmd as containers?

Does anyone have creative ideas to solve that problem, or some thoughts on the subject?

[almet]

Hi @develorer and sorry you haven't had an answer sooner.

We currently rely quite heavily on docker containers in the current form of Dangerzone. That being said, the "isolation provider" mechanism is extensible, and it seems possible to add an isolation provider for OpenBSD.

But I'm not sure we would like to go down that road: adding the code is one thing but maintaining it is another, and I'm not sure we would be able to maintain and test the OpenBSD isolation provider backend ourselves.

As a side note, this makes me wonder if it would be useful to have a kind of "plugin" mechanism for Dangerzone, e.g. being able to register some isolation provider mechanisms (but that surely opens security considerations).

(Note: Github CI proposes way to test this with https://github.com/vmactions/openbsd-vm)