From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from atuin.qyliss.net (localhost [IPv6:::1]) by atuin.qyliss.net (Postfix) with ESMTP id 20A3D2D1D; Mon, 13 Jul 2026 14:17:20 +0000 (UTC) Received: by atuin.qyliss.net (Postfix, from userid 993) id 0B1B82D10; Mon, 13 Jul 2026 14:17:18 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on atuin.qyliss.net X-Spam-Level: X-Spam-Status: No, score=-0.1 required=3.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,DMARC_PASS,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE, SPF_HELO_NONE autolearn=unavailable autolearn_force=no version=4.0.1 Received: from mail-yw1-x112e.google.com (mail-yw1-x112e.google.com [IPv6:2607:f8b0:4864:20::112e]) by atuin.qyliss.net (Postfix) with ESMTPS id C2AD92D0F for ; Mon, 13 Jul 2026 14:17:16 +0000 (UTC) Received: by mail-yw1-x112e.google.com with SMTP id 00721157ae682-80dc4a68e4aso26857667b3.0 for ; Mon, 13 Jul 2026 07:17:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1783952235; x=1784557035; darn=spectrum-os.org; h=content-type:in-reply-to:autocrypt:from:content-language:references :cc:to:subject:user-agent:mime-version:date:message-id:from:to:cc :subject:date:message-id:reply-to:content-type; bh=NO6f0xLaxrJhtsWWSDUJFfert+UHD73xkMkNT6yr6fk=; b=jhpE2DGGt8+V1yyp+aeZGDFwnefETuaFleV1dIhIP+w/9jskFt+6l0vjDuIEkfs1lG l+d9CgUsx30q8bmMYgtZoOR9t719RM94rKnrVEg2Geu5tjRsQnouPH+KDd/iNwUdQhpu ZeYRSOWYFRhaeCSe09ij8bEKxpiC3MVLT7QYTkAhhvd6/uMxIVllF36B98pqQ5/M5H5n nK5XpVYMIam00lXoWDGFbN8u9fUEUeIn/EtuqHY7qEqS9TaOIGmNSdvk+TzrsBgBCfY/ gt8JikHOIiNBaYvWNy4u1zMuAeUkF2I2W7P3mhjnQC5BRd8LS9D/h5RyFj76ZIApNMsN lcHA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783952235; x=1784557035; h=content-type:in-reply-to:autocrypt:from:content-language:references :cc:to:subject:user-agent:mime-version:date:message-id:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=NO6f0xLaxrJhtsWWSDUJFfert+UHD73xkMkNT6yr6fk=; b=FTs7EklMGIAY5BkYIxVfNOJfR+vZtUzM5Fq0MaQbRAccj3DqJKPc65GZZe07rBldv+ c7Ot6DWW2LiByQ/fWkxegpOrXNSxBV9vVplPe0+yNyFC4oFJE9x2wpndb6MkEmt6y8ag YuvSZApjF+oZjRzt7tW0QCWZAKbtEYKXmhBtUyLFcHFBmKHtHqFnV+hKZ3GWEjBbcE6L iJ8lUojNJ/VfRJPZ2Z5ieaFYLHUqG+aTO7acFkW/AphMm2HU/UDB4OYNFeTMnpNTzJLU S7Kj9iZneqPQYAtalHNuhO+Ef+iijJJ39GBC6Gkhc4VQKim2g5xFznuzFmy/ug2qcT+a ai3A== X-Gm-Message-State: AOJu0YxeV2EaisYyRMtW2S0wa4tJf6gWav2vW/VRxhHIXtL3ieoVbISp gXW0YMbUH0JHF9MIiBBKwVTnXz6h+O+uGa10O7NVsmxF3jg6+Q+Jt7ghoWD2aQ== X-Gm-Gg: AfdE7cn2wnVrTuq+eZAdpW0QoD8+2gHANzkTK0jI1uoWOKD7CCKEAXN3YUGH0phhGy/ ZE76FO/+rdQS5mzaH8QGxl6WsjqexAcP5Bdz9mJcCSNB3uG6z6ngaIVuc/S0t4MolDIRRu0Y6ap RtPNDiSsrZB/IO3Pg4J6RQ85nGyqbRFDWR9YdS8tMVJMJ/dvEb3G88BoahFQW9eTyQyEDPdewU2 nZZz1MBqMaujAzA4qZ0flypXPtbzQ25QIWkD+yY3qt3xEmOpiS7NIdqgwVmaOh02g6Lkc2DFjV0 mg8thm7RdgU7T8Xk7Ccu/vvErCUthxYtB++B3fuOqjPglKRdZaAsDqHpWmFKYhlrNNylkWWSYIm GnXzVYF171gpoNA4DGy3ftIyQTzWyGOAqG/HFq2rwHiL0WdGiDkLj1FLoEP/X9x/6KPoUJLA+fo kwBWIwdJRlrzYB4jk= X-Received: by 2002:a05:690c:4b90:b0:81d:b439:64ab with SMTP id 00721157ae682-81e90026795mr63941707b3.1.1783952234586; Mon, 13 Jul 2026 07:17:14 -0700 (PDT) Received: from [10.138.10.6] ([185.98.168.14]) by smtp.gmail.com with ESMTPSA id 00721157ae682-81e6be98dfbsm115927587b3.2.2026.07.13.07.17.13 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 13 Jul 2026 07:17:13 -0700 (PDT) Message-ID: <6903a8b2-0932-4445-bf60-8a023e2f43c6@gmail.com> Date: Mon, 13 Jul 2026 10:17:08 -0400 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH] host/rootfs: Avoid using bwrap to enter new PID namespace To: Alyssa Ross References: <20260709-s6-pid-namespaces-v1-1-61a56abd1e7c@gmail.com> <87ldbiaoyh.fsf@alyssa.is> <47d40c5e-ef44-4101-857e-3f656f1d14bf@gmail.com> <87jyqz1cwq.fsf@alyssa.is> Content-Language: en-US From: Demi Marie Obenour Autocrypt: addr=demiobenour@gmail.com; keydata= xsFNBFp+A0oBEADffj6anl9/BHhUSxGTICeVl2tob7hPDdhHNgPR4C8xlYt5q49yB+l2nipd aq+4Gk6FZfqC825TKl7eRpUjMriwle4r3R0ydSIGcy4M6eb0IcxmuPYfbWpr/si88QKgyGSV Z7GeNW1UnzTdhYHuFlk8dBSmB1fzhEYEk0RcJqg4AKoq6/3/UorR+FaSuVwT7rqzGrTlscnT DlPWgRzrQ3jssesI7sZLm82E3pJSgaUoCdCOlL7MMPCJwI8JpPlBedRpe9tfVyfu3euTPLPx wcV3L/cfWPGSL4PofBtB8NUU6QwYiQ9Hzx4xOyn67zW73/G0Q2vPPRst8LBDqlxLjbtx/WLR 6h3nBc3eyuZ+q62HS1pJ5EvUT1vjyJ1ySrqtUXWQ4XlZyoEFUfpJxJoN0A9HCxmHGVckzTRl 5FMWo8TCniHynNXsBtDQbabt7aNEOaAJdE7to0AH3T/Bvwzcp0ZJtBk0EM6YeMLtotUut7h2 Bkg1b//r6bTBswMBXVJ5H44Qf0+eKeUg7whSC9qpYOzzrm7+0r9F5u3qF8ZTx55TJc2g656C 9a1P1MYVysLvkLvS4H+crmxA/i08Tc1h+x9RRvqba4lSzZ6/Tmt60DPM5Sc4R0nSm9BBff0N m0bSNRS8InXdO1Aq3362QKX2NOwcL5YaStwODNyZUqF7izjK4QARAQABzTxEZW1pIE1hcmll IE9iZW5vdXIgKGxvdmVyIG9mIGNvZGluZykgPGRlbWlvYmVub3VyQGdtYWlsLmNvbT7CwXgE EwECACIFAlp+A0oCGwMGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJELKItV//nCLBhr8Q AK/xrb4wyi71xII2hkFBpT59ObLN+32FQT7R3lbZRjVFjc6yMUjOb1H/hJVxx+yo5gsSj5LS 9AwggioUSrcUKldfA/PKKai2mzTlUDxTcF3vKx6iMXKA6AqwAw4B57ZEJoMM6egm57TV19kz PMc879NV2nc6+elaKl+/kbVeD3qvBuEwsTe2Do3HAAdrfUG/j9erwIk6gha/Hp9yZlCnPTX+ VK+xifQqt8RtMqS5R/S8z0msJMI/ajNU03kFjOpqrYziv6OZLJ5cuKb3bZU5aoaRQRDzkFIR 6aqtFLTohTo20QywXwRa39uFaOT/0YMpNyel0kdOszFOykTEGI2u+kja35g9TkH90kkBTG+a EWttIht0Hy6YFmwjcAxisSakBuHnHuMSOiyRQLu43ej2+mDWgItLZ48Mu0C3IG1seeQDjEYP tqvyZ6bGkf2Vj+L6wLoLLIhRZxQOedqArIk/Sb2SzQYuxN44IDRt+3ZcDqsPppoKcxSyd1Ny 2tpvjYJXlfKmOYLhTWs8nwlAlSHX/c/jz/ywwf7eSvGknToo1Y0VpRtoxMaKW1nvH0OeCSVJ itfRP7YbiRVc2aNqWPCSgtqHAuVraBRbAFLKh9d2rKFB3BmynTUpc1BQLJP8+D5oNyb8Ts4x Xd3iV/uD8JLGJfYZIR7oGWFLP4uZ3tkneDfYzsFNBFp+A0oBEAC9ynZI9LU+uJkMeEJeJyQ/ 8VFkCJQPQZEsIGzOTlPnwvVna0AS86n2Z+rK7R/usYs5iJCZ55/JISWd8xD57ue0eB47bcJv VqGlObI2DEG8TwaW0O0duRhDgzMEL4t1KdRAepIESBEA/iPpI4gfUbVEIEQuqdqQyO4GAe+M kD0Hy5JH/0qgFmbaSegNTdQg5iqYjRZ3ttiswalql1/iSyv1WYeC1OAs+2BLOAT2NEggSiVO txEfgewsQtCWi8H1SoirakIfo45Hz0tk/Ad9ZWh2PvOGt97Ka85o4TLJxgJJqGEnqcFUZnJJ riwoaRIS8N2C8/nEM53jb1sH0gYddMU3QxY7dYNLIUrRKQeNkF30dK7V6JRH7pleRlf+wQcN fRAIUrNlatj9TxwivQrKnC9aIFFHEy/0mAgtrQShcMRmMgVlRoOA5B8RTulRLCmkafvwuhs6 dCxN0GNAORIVVFxjx9Vn7OqYPgwiofZ6SbEl0hgPyWBQvE85klFLZLoj7p+joDY1XNQztmfA rnJ9x+YV4igjWImINAZSlmEcYtd+xy3Li/8oeYDAqrsnrOjb+WvGhCykJk4urBog2LNtcyCj kTs7F+WeXGUo0NDhbd3Z6AyFfqeF7uJ3D5hlpX2nI9no/ugPrrTVoVZAgrrnNz0iZG2DVx46 x913pVKHl5mlYQARAQABwsFfBBgBAgAJBQJafgNKAhsMAAoJELKItV//nCLBwNIP/AiIHE8b oIqReFQyaMzxq6lE4YZCZNj65B/nkDOvodSiwfwjjVVE2V3iEzxMHbgyTCGA67+Bo/d5aQGj gn0TPtsGzelyQHipaUzEyrsceUGWYoKXYyVWKEfyh0cDfnd9diAm3VeNqchtcMpoehETH8fr RHnJdBcjf112PzQSdKC6kqU0Q196c4Vp5HDOQfNiDnTf7gZSj0BraHOByy9LEDCLhQiCmr+2 E0rW4tBtDAn2HkT9uf32ZGqJCn1O+2uVfFhGu6vPE5qkqrbSE8TG+03H8ecU2q50zgHWPdHM OBvy3EhzfAh2VmOSTcRK+tSUe/u3wdLRDPwv/DTzGI36Kgky9MsDC5gpIwNbOJP2G/q1wT1o Gkw4IXfWv2ufWiXqJ+k7HEi2N1sree7Dy9KBCqb+ca1vFhYPDJfhP75I/VnzHVssZ/rYZ9+5 1yDoUABoNdJNSGUYl+Yh9Pw9pE3Kt4EFzUlFZWbE4xKL/NPno+z4J9aWemLLszcYz/u3XnbO vUSQHSrmfOzX3cV4yfmjM5lewgSstoxGyTx2M8enslgdXhPthZlDnTnOT+C+OTsh8+m5tos8 HQjaPM01MKBiAqdPgksm1wu2DrrwUi6ChRVTUBcj6+/9IJ81H2P2gJk3Ls3AVIxIffLoY34E +MYSfkEjBz0E8CLOcAw7JIwAaeBT In-Reply-To: <87jyqz1cwq.fsf@alyssa.is> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------GsepeBuARkr00blrvbg0MhbV" Message-ID-Hash: V554HH3BW63RMY5Z2EX7TNRQGPGQCXNQ X-Message-ID-Hash: V554HH3BW63RMY5Z2EX7TNRQGPGQCXNQ X-MailFrom: demiobenour@gmail.com X-Mailman-Rule-Hits: member-moderation X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-devel.spectrum-os.org-0; header-match-devel.spectrum-os.org-1; header-match-devel.spectrum-os.org-2; header-match-devel.spectrum-os.org-3; header-match-devel.spectrum-os.org-4; emergency CC: Spectrum OS Development X-Mailman-Version: 3.3.10 Precedence: list List-Id: Patches and low-level development discussion Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------GsepeBuARkr00blrvbg0MhbV Content-Type: multipart/mixed; boundary="------------Gx648gCXt2hRqwiDs66Eg00i"; protected-headers="v1"; hp="clear" Message-ID: <6903a8b2-0932-4445-bf60-8a023e2f43c6@gmail.com> Date: Mon, 13 Jul 2026 10:17:08 -0400 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH] host/rootfs: Avoid using bwrap to enter new PID namespace To: Alyssa Ross Cc: Spectrum OS Development References: <20260709-s6-pid-namespaces-v1-1-61a56abd1e7c@gmail.com> <87ldbiaoyh.fsf@alyssa.is> <47d40c5e-ef44-4101-857e-3f656f1d14bf@gmail.com> <87jyqz1cwq.fsf@alyssa.is> Content-Language: en-US From: Demi Marie Obenour Autocrypt: addr=demiobenour@gmail.com; keydata= xsFNBFp+A0oBEADffj6anl9/BHhUSxGTICeVl2tob7hPDdhHNgPR4C8xlYt5q49yB+l2nipd aq+4Gk6FZfqC825TKl7eRpUjMriwle4r3R0ydSIGcy4M6eb0IcxmuPYfbWpr/si88QKgyGSV Z7GeNW1UnzTdhYHuFlk8dBSmB1fzhEYEk0RcJqg4AKoq6/3/UorR+FaSuVwT7rqzGrTlscnT DlPWgRzrQ3jssesI7sZLm82E3pJSgaUoCdCOlL7MMPCJwI8JpPlBedRpe9tfVyfu3euTPLPx wcV3L/cfWPGSL4PofBtB8NUU6QwYiQ9Hzx4xOyn67zW73/G0Q2vPPRst8LBDqlxLjbtx/WLR 6h3nBc3eyuZ+q62HS1pJ5EvUT1vjyJ1ySrqtUXWQ4XlZyoEFUfpJxJoN0A9HCxmHGVckzTRl 5FMWo8TCniHynNXsBtDQbabt7aNEOaAJdE7to0AH3T/Bvwzcp0ZJtBk0EM6YeMLtotUut7h2 Bkg1b//r6bTBswMBXVJ5H44Qf0+eKeUg7whSC9qpYOzzrm7+0r9F5u3qF8ZTx55TJc2g656C 9a1P1MYVysLvkLvS4H+crmxA/i08Tc1h+x9RRvqba4lSzZ6/Tmt60DPM5Sc4R0nSm9BBff0N m0bSNRS8InXdO1Aq3362QKX2NOwcL5YaStwODNyZUqF7izjK4QARAQABzTxEZW1pIE1hcmll IE9iZW5vdXIgKGxvdmVyIG9mIGNvZGluZykgPGRlbWlvYmVub3VyQGdtYWlsLmNvbT7CwXgE EwECACIFAlp+A0oCGwMGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJELKItV//nCLBhr8Q AK/xrb4wyi71xII2hkFBpT59ObLN+32FQT7R3lbZRjVFjc6yMUjOb1H/hJVxx+yo5gsSj5LS 9AwggioUSrcUKldfA/PKKai2mzTlUDxTcF3vKx6iMXKA6AqwAw4B57ZEJoMM6egm57TV19kz PMc879NV2nc6+elaKl+/kbVeD3qvBuEwsTe2Do3HAAdrfUG/j9erwIk6gha/Hp9yZlCnPTX+ VK+xifQqt8RtMqS5R/S8z0msJMI/ajNU03kFjOpqrYziv6OZLJ5cuKb3bZU5aoaRQRDzkFIR 6aqtFLTohTo20QywXwRa39uFaOT/0YMpNyel0kdOszFOykTEGI2u+kja35g9TkH90kkBTG+a EWttIht0Hy6YFmwjcAxisSakBuHnHuMSOiyRQLu43ej2+mDWgItLZ48Mu0C3IG1seeQDjEYP tqvyZ6bGkf2Vj+L6wLoLLIhRZxQOedqArIk/Sb2SzQYuxN44IDRt+3ZcDqsPppoKcxSyd1Ny 2tpvjYJXlfKmOYLhTWs8nwlAlSHX/c/jz/ywwf7eSvGknToo1Y0VpRtoxMaKW1nvH0OeCSVJ itfRP7YbiRVc2aNqWPCSgtqHAuVraBRbAFLKh9d2rKFB3BmynTUpc1BQLJP8+D5oNyb8Ts4x Xd3iV/uD8JLGJfYZIR7oGWFLP4uZ3tkneDfYzsFNBFp+A0oBEAC9ynZI9LU+uJkMeEJeJyQ/ 8VFkCJQPQZEsIGzOTlPnwvVna0AS86n2Z+rK7R/usYs5iJCZ55/JISWd8xD57ue0eB47bcJv VqGlObI2DEG8TwaW0O0duRhDgzMEL4t1KdRAepIESBEA/iPpI4gfUbVEIEQuqdqQyO4GAe+M kD0Hy5JH/0qgFmbaSegNTdQg5iqYjRZ3ttiswalql1/iSyv1WYeC1OAs+2BLOAT2NEggSiVO txEfgewsQtCWi8H1SoirakIfo45Hz0tk/Ad9ZWh2PvOGt97Ka85o4TLJxgJJqGEnqcFUZnJJ riwoaRIS8N2C8/nEM53jb1sH0gYddMU3QxY7dYNLIUrRKQeNkF30dK7V6JRH7pleRlf+wQcN fRAIUrNlatj9TxwivQrKnC9aIFFHEy/0mAgtrQShcMRmMgVlRoOA5B8RTulRLCmkafvwuhs6 dCxN0GNAORIVVFxjx9Vn7OqYPgwiofZ6SbEl0hgPyWBQvE85klFLZLoj7p+joDY1XNQztmfA rnJ9x+YV4igjWImINAZSlmEcYtd+xy3Li/8oeYDAqrsnrOjb+WvGhCykJk4urBog2LNtcyCj kTs7F+WeXGUo0NDhbd3Z6AyFfqeF7uJ3D5hlpX2nI9no/ugPrrTVoVZAgrrnNz0iZG2DVx46 x913pVKHl5mlYQARAQABwsFfBBgBAgAJBQJafgNKAhsMAAoJELKItV//nCLBwNIP/AiIHE8b oIqReFQyaMzxq6lE4YZCZNj65B/nkDOvodSiwfwjjVVE2V3iEzxMHbgyTCGA67+Bo/d5aQGj gn0TPtsGzelyQHipaUzEyrsceUGWYoKXYyVWKEfyh0cDfnd9diAm3VeNqchtcMpoehETH8fr RHnJdBcjf112PzQSdKC6kqU0Q196c4Vp5HDOQfNiDnTf7gZSj0BraHOByy9LEDCLhQiCmr+2 E0rW4tBtDAn2HkT9uf32ZGqJCn1O+2uVfFhGu6vPE5qkqrbSE8TG+03H8ecU2q50zgHWPdHM OBvy3EhzfAh2VmOSTcRK+tSUe/u3wdLRDPwv/DTzGI36Kgky9MsDC5gpIwNbOJP2G/q1wT1o Gkw4IXfWv2ufWiXqJ+k7HEi2N1sree7Dy9KBCqb+ca1vFhYPDJfhP75I/VnzHVssZ/rYZ9+5 1yDoUABoNdJNSGUYl+Yh9Pw9pE3Kt4EFzUlFZWbE4xKL/NPno+z4J9aWemLLszcYz/u3XnbO vUSQHSrmfOzX3cV4yfmjM5lewgSstoxGyTx2M8enslgdXhPthZlDnTnOT+C+OTsh8+m5tos8 HQjaPM01MKBiAqdPgksm1wu2DrrwUi6ChRVTUBcj6+/9IJ81H2P2gJk3Ls3AVIxIffLoY34E +MYSfkEjBz0E8CLOcAw7JIwAaeBT In-Reply-To: <87jyqz1cwq.fsf@alyssa.is> --------------Gx648gCXt2hRqwiDs66Eg00i Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On 7/13/26 05:01, Alyssa Ross wrote: > Demi Marie Obenour writes: >=20 >> On 7/10/26 10:39, Alyssa Ross wrote: >>> Demi Marie Obenour writes: >>> >>>> diff --git a/host/rootfs/image/etc/s6-linux-init/run-image/service/v= m-services/template/data/service/vhost-user-gpu/run b/host/rootfs/image/e= tc/s6-linux-init/run-image/service/vm-services/template/data/service/vhos= t-user-gpu/run >>>> index c3bfafe02ec6d2ee418fe56b033bbc4c7a73b186..f5c0f15184f0e72457f9= c0bfa546590b9308eb9c 100755 >>>> --- a/host/rootfs/image/etc/s6-linux-init/run-image/service/vm-servi= ces/template/data/service/vhost-user-gpu/run >>>> +++ b/host/rootfs/image/etc/s6-linux-init/run-image/service/vm-servi= ces/template/data/service/vhost-user-gpu/run >>>> @@ -17,9 +17,10 @@ s6-applyuidgid -UzG 15 # wayland >>>> s6-ipcserverd -1c 1 >>>> =20 >>>> bwrap >>>> - --unshare-all >>>> - # --unshare-all only implies --unshare-user-try. >>>> - # Make this more than a "try". >>>> + --unshare-net >>>> + --unshare-ipc >>>> + --unshare-uts >>>> + --unshare-cgroup >>>> --unshare-user >>>> --bind $WAYLAND_DISPLAY $WAYLAND_DISPLAY >>>> --ro-bind /usr /usr >>> >>> There's a subtle behaviour change here. The pid namespace is reused >>> between runs of crosvm, because if crosvm exits, s6-ipcserverd will s= tay >>> running and wait for the next connection, then respawn crosvm. It's >>> done this way because crosvm has made the unusual decision to support= >>> being started on a connected socket, rather than a listening socket l= ike >>> one might expect. Is that okay? I'd guess yes, but I want to check >>> with you! >> >> It's less robust than I would like, but there is no reason one cannot >> have both s6-supervise and bubblewrap create PID namespaces. That's >> the approach I would go with. >=20 > What's the point of the intermediate PID namespace? Ensure that there are no stale Cloud Hypervisor processes left behind. Specifically, the PTY watcher ought to be moved to the main process if there is only one PTY, but it=E2=80=99s currently a separate process. --=20 Sincerely, Demi Marie Obenour (she/her/hers) --------------Gx648gCXt2hRqwiDs66Eg00i-- --------------GsepeBuARkr00blrvbg0MhbV Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEopQtqVJW1aeuo9/sszaHOrMp8lMFAmpU82QACgkQszaHOrMp 8lNkOQ/8C7pvPYt0PTpSjEvS7qPZp0LqWmYtWABqkllqBCFKKMB86rHsMpWdBNKv QglIrsczgGkHKZdnBODoBfQ1WBT3fIaKw8vfKjdb6DwlRuuF1hxiqVfZareB7KJD HHMaX4c1Mu6BIP6UrclLUzO4Yf3CpeJdciUzF9rIpDisO59j6eebxfM0Y0TwMfCi ys3ChCKalt3uusLEgOMyTSiax9j9Ba9qe3/hbugI4Zz3d/RBhxe3WawkxjYXt6X6 FhGRmkGMV/kebhQuqZUoX9QosB4uiK1DhNVuqlQSv8MPzyJ2PgSFAhvRCvVLgZbN a2dQdiMjJkgByIQ2bUaQ8O+r+aae2Y+C/m0uxpI6cBjmblJzBZTPEbFSxNB1g5JD RqicM9t7nlHKUpP4jgnl63+H0ZZQ6WCilRKYRsRXFVWgYdeYpTmMpFnc9kCs2TNb /kMCfZbRKD5F5+lcVI7qFyY8+ZTe3U/54w6pAyjnxZJ97EbFbdsYTjpVHD4gn2Du QczCebU+/r59GWWFLnJZVom8z0h8p9Ch9SaBVq2M0PK2NM0iSPm5QrlXN3y7vVrN O/Fv92TR1yy42n6WpJ4mB+G8W6j2xSaHrXM1zvxhzCVPD6us9TGAom3QmP5lT7Zd LvbR8GwcDDZ1tMiDxZcds4AyHmhxsCoC0UjVi196lSJvL+aF1K4= =kfQS -----END PGP SIGNATURE----- --------------GsepeBuARkr00blrvbg0MhbV--