From mboxrd@z Thu Jan 1 00:00:00 1970 From: Chris Marusich Subject: Re: Generating wrappers for execution in non-root non-Guix contexts Date: Thu, 26 Apr 2018 20:21:08 -0700 Message-ID: <87r2n12v2z.fsf@gmail.com> References: <87zi1rwsv6.fsf@inria.fr> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:48143) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fBtwf-0005os-8e for guix-devel@gnu.org; Thu, 26 Apr 2018 23:21:14 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fBtwe-0005Vv-F9 for guix-devel@gnu.org; Thu, 26 Apr 2018 23:21:13 -0400 Received: from mail-pg0-x22a.google.com ([2607:f8b0:400e:c05::22a]:46391) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1fBtwe-0005V8-8j for guix-devel@gnu.org; Thu, 26 Apr 2018 23:21:12 -0400 Received: by mail-pg0-x22a.google.com with SMTP id z4-v6so430035pgu.13 for ; Thu, 26 Apr 2018 20:21:12 -0700 (PDT) In-Reply-To: <87zi1rwsv6.fsf@inria.fr> ("Ludovic \=\?utf-8\?Q\?Court\=C3\=A8s\=22\?\= \=\?utf-8\?Q\?'s\?\= message of "Wed, 25 Apr 2018 11:14:05 +0200") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ludovic =?utf-8?Q?Court=C3=A8s?= Cc: guix-devel --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable ludovic.courtes@inria.fr (Ludovic Court=C3=A8s) writes: > Hello Guix! > > The hack below allows =E2=80=98guix pack=E2=80=99 to produce wrappers tha= t allow, > through user namespaces, programs to automatically relocate themselves > when you run them unprivileged on a machine that lacks Guix. That's really cool! I've noticed that when running in a chroot-like environment, sometimes programs expect certain files to exist that don't - for example, device files in /dev, procfs files in /proc, or even things like /etc/resolv.conf. Does this wrapper automatically create those kinds of files, or would programs that want to access those kinds of files still need some special love on an case-by-case basis? =2D-=20 Chris --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEy/WXVcvn5+/vGD+x3UCaFdgiRp0FAlrilyQACgkQ3UCaFdgi Rp1HPw/+IwAm5rzmfQCDSSbNJAkot/w+7egULQp4RzVjCGYw4JwoiBW0q4eWPGpp 1ed0BFgwpft0/3hKEWCRDY6WJKyoJ++mRYXy0Qb9IymCte0FFuvWotWnYU6+/uuh 1KFEC+pHEZjfdyIPMW+wR/SsxbjJDlHpDR13AJ5Rz0zQqNz2wvzE/mmlhoapHWwg 2dVJrDL4CrkLWbxXyPTI6oysA6t1RMcxMzeqpOEk8W52kTANtK8ncWz0zBFCmFfI qYS5jds3IqFANY5Q68mbLQCVwbdve1KQVeu5BHaCrRtuDrVBmK9/4UkkWgM2drKx Gs4mhAhaxHbb58GyG3YlumfDEXnJJnomfnhKvDBQTTjpMWAVbklQcoJmp5H6KyxS L4cxEwoEkSUuiyuwhf5L+1TEznMGlL2S64RCouy8lnaHUQP6/obDgSZ3TzgITWNG VnQpNHx8YSl7LrgEU/mCUE4Cny3WjbT/lqcdJjAaK1ObpOXoPu0tjh2Esy4h5Zo3 ROfecAHimHY9uyXwaX6gjBsI5iexTsg71rN6yEH7DP+BJ3Ez/5OMOiiuE/89xINa UNNkmiTScE8czSidxkz/AfDNu2nDjEnSdb00zlMk3TSpe/zwK3q2rHK85rYbYbxM elYxLqVe5j0GbCcW83NurQkyol/JX4+4YWgBosRl3ahqvsijz6k= =vhq4 -----END PGP SIGNATURE----- --=-=-=--