NetVM: 1:1 profile:node mapping — hashed iface names, netvm-enter + netvm-chrome launcher

2026-10-03 00:43:08 -04:00
parent 218a527623
commit b86b6fa4b5
8 changed files with 84 additions and 46 deletions
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+# runs as root inside the netns + a private mount ns; drops privs, execs cmd.
+set -euo pipefail
+mount --bind "$NETVM_RESOLV" /etc/resolv.conf
+exec setpriv --reuid="$NETVM_UID" --regid="$NETVM_GID" --clear-groups \
+  env HOME="$NETVM_HOME" "$@"