From mboxrd@z Thu Jan 1 00:00:00 1970 From: Joshua Branson Subject: Re: Anyone working on packaging Firejail? Date: Thu, 20 Dec 2018 11:19:07 -0500 Message-ID: <878t0kkw78.fsf@dismail.de> References: <0e147b49-4a5a-c269-5973-8709e6c37ba6@riseup.net> <87r2eciqge.fsf@ambrevar.xyz> <579539a2-0818-fc75-4a04-ddeb6708ef7a@riseup.net> Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:43971) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ga10T-0004yJ-7c for guix-devel@gnu.org; Thu, 20 Dec 2018 11:17:05 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ga10O-0000uh-Kp for guix-devel@gnu.org; Thu, 20 Dec 2018 11:17:05 -0500 Received: from dismail.de ([78.46.223.134]:44857) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1ga10O-0000tO-67 for guix-devel@gnu.org; Thu, 20 Dec 2018 11:17:00 -0500 Received: from dismail.de (localhost [127.0.0.1]) by dismail.de (OpenSMTPD) with ESMTP id afbe8f64 for ; Thu, 20 Dec 2018 17:16:58 +0100 (CET) Received: from smtp2.dismail.de (10.240.26.12 [10.240.26.12]) by mx1.dismail.de (OpenSMTPD) with ESMTP id c1043f47 for ; Thu, 20 Dec 2018 17:16:58 +0100 (CET) Received: from smtp2.dismail.de (localhost [127.0.0.1]) by smtp2.dismail.de (OpenSMTPD) with ESMTP id 335263b3 for ; Thu, 20 Dec 2018 17:16:57 +0100 (CET) Received: by dismail.de (OpenSMTPD) with ESMTPSA id dfdff4f9 (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256:NO) for ; Thu, 20 Dec 2018 17:16:57 +0100 (CET) In-Reply-To: (swedebugia's message of "Thu, 20 Dec 2018 13:28:06 +0100") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel@gnu.org swedebugia writes: > On 2018-12-20 13:17, swedebugia wrote: >> On 2018-12-20 08:53, Pierre Neidhardt wrote: >>> Can anyone weigh the pros and cons between Firejail and Guix containers? >>> >> >> Yeah, good idea. >> >> Is guix container using kernel namespaces? >> >> Our manual[1] did not say. If yes then I think we should advertise >> this on the front page! >> >> A run your browser in a container example script would also be nice. >> >> I think we already have all the features beside the gui of firetools. :D >> > > Found this! > > Run icecat, a browser, in a container with > > guix environment --container --network --share=/tmp/.X11-unix > --ad-hoc icecat > export DISPLAY=":0.0" > icecat Is there a way to do this automatically? ie: you don't have to type guix environment --container .... icecat? You just type "icecat?" Thanks > > https://github.com/pjotrp/guix-notes/blob/master/CONTAINERS.org#browser -- Joshua Branson Sent from Emacs and Gnus