Sebastian Wick

FWIW, the order as implemented right now makes a lot of sense when you build the command line for it from a program like flatpak.

I have a flatpak branch now which is basically doing `--overlay-src $path-to-runtime-src --overlay-src $path-to-flatpak-helper-monitor --tmp-overlay /etc` and any subsequent attempt to mount something onto existing directories in `/etc` fails with...

@rhendric True, one would have to reorder the command line options to avoid that and possibly mount over the masking layer directory.

The path escaping tests fail for me.

Added support for adding layers inside the sandbox. The tests show an example of how this could be used and how I intend to use it with flatpak. A few...

Building the layer outside of the sandbox is really against the way that flatpak works. When flatpak execs bwrap, it wants all resources to be cleaned up by the kernel...

re escaping, logs: ```sh + /var/home/swick/Projects/bubblewrap/build/bwrap --bind / / --tmpfs /tmp --overlay-src 'lower :,\' --overlay 'upper :,\' 'work :,\' /tmp/x sh -c 'cat /tmp/x/a; printf 2 > /tmp/x/a; cat /tmp/x/a'...

Alright, let's move the `--overlay-src-inside`/masking feature to a new issue (created #601). There are still two commits which I would like you to pull in: c2e7302f63d057fa1d70b12719a11bbe7cd93d21 and 80ec9ca2572f16dc1b0dc1df002742a0008b4dc7. They simplify...

A few comments about the latest changes: 1. If the kernel changed the escaping this is a kernel regression and should be fixed in the kernel. 2. Using the version...

That sounds good to me. There are a few ways we could get consistent escaping and we should leave a comment in the code explaining in detail why we currently...