sysbox
sysbox copied to clipboard
nestybox
Add support for TUN/TAP devices inside Sysbox containers
Several users have requested support for allowing the creation of TUN/TAP devices inside a Sysbox container.
This currently does not work as the Linux kernel does not allow mknod inside the user-namespace (which Sysbox uses in all containers).
This epic calls for implementing this feature. @rodnymolina has done some work on it already, so assigning it to him.
Not opening a new ticket because it's the same underlying issue. But some tools (in my case tools to test debian packages, like piuparts) want to manually create a /dev/null with mknod and therefore fail as well:
$ mknod -m 666 ${CHROOT_PATH}/dev/null c 1 3
mknod: /tmp/debian-chroot/dev/null: Operation not permitted
No updates yet unfortunately, @rodnymolina and I have been busy with other tasks. Sorry :(
Open to any contributions on this though.
No updates yet unfortunately, @rodnymolina and I have been busy with other tasks. Sorry :(
Open to any contributions on this though.
It's OSS, no expectations :)
My issue is not that important right now but I hope it gains some relevance in a few months. If you have a pointer to a PR which implemented something similar or some files in the codebase that might be relevant to it, that would be very helpful (and motivating :D) to see if I could do something...