From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from atuin.qyliss.net (localhost [IPv6:::1]) by atuin.qyliss.net (Postfix) with ESMTP id 157193C5F; Wed, 15 Jul 2026 16:51:44 +0000 (UTC) Received: by atuin.qyliss.net (Postfix, from userid 993) id AD8643BEF; Wed, 15 Jul 2026 16:51:41 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on atuin.qyliss.net X-Spam-Level: X-Spam-Status: No, score=-0.1 required=3.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,DMARC_PASS,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE, SPF_HELO_NONE autolearn=unavailable autolearn_force=no version=4.0.1 Received: from mail-yw1-x1131.google.com (mail-yw1-x1131.google.com [IPv6:2607:f8b0:4864:20::1131]) by atuin.qyliss.net (Postfix) with ESMTPS id 8DE1D3BEB for ; Wed, 15 Jul 2026 16:51:40 +0000 (UTC) Received: by mail-yw1-x1131.google.com with SMTP id 00721157ae682-81e6f2ee60bso11362737b3.1 for ; Wed, 15 Jul 2026 09:51:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1784134297; x=1784739097; darn=spectrum-os.org; h=content-type:in-reply-to:autocrypt:from:content-language:references :cc:to:subject:user-agent:mime-version:date:message-id:from:to:cc :subject:date:message-id:reply-to:content-type; bh=NR88fQMVDbuH9NQjfm61tgKv1ImqAJjZ0nw/3kBDUlo=; b=j/K5ImyIYQlKTlmVUxXWTPb0998cTO5AyXc7v9z4+3iXtw1HCccC0FvlcPSmwvqcqs x9xStYJ1WLJ69eBtpPzldfuF7DA//rYeAHGKOIWYRCzBOP4Ln2rLvTTA7FgOQDQmAad0 LqADs5JDQ74jrR+svgWjzNzrfv+L1iqvY+5spGb6f5DkRaeKn8yN4eIBGKvYK+mCjrNq TtqTnECovJnsrhTaBd9QZsxj1C1NEqcBIGnUi8Y5zLE8KRMEVjSxSLKOZYuLxwB3Sf1n 2MlmkLWKvglSVq5PPw/pHCO/DQVwNLn+61I0exfFRLFuxrjyeMK8oPn7nanLQuyCRJFh LsRg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1784134297; x=1784739097; h=content-type:in-reply-to:autocrypt:from:content-language:references :cc:to:subject:user-agent:mime-version:date:message-id:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=NR88fQMVDbuH9NQjfm61tgKv1ImqAJjZ0nw/3kBDUlo=; b=N1xWSKB5vG53SBL8TUx5PgMBat6TLCxZbZaxEI1oVZNpz7W1BpNgAs2pc5qW2cHEwA upVkvg/gQWa/fdst+fM+n1m6RqFOpJZZBhmWPGAjqvSR2Z+2OYIEqe+np9Lk+LhnSuN0 3PU+pMz3evsPzj05bvvPrZuS7Zid9iDHXIAKxtHEliznfzFfMxJqolHvBkvAldVztDHv sqG/wmQhGusnz3a6WncgBPWJEanjul9xYgpA8gLxnvJztNhIVgIR79Y9FyPfW3fLG8dB oxMPOBxZzUBPq9ABvEPcMjA7aEV/GWRQBQKsH+jZdbNUe0yIdYklNrTt1Snu2ym6UdKL XvHg== X-Gm-Message-State: AOJu0YyfwMk0TvaJgwkSxhhUefqpUQyyQFMfiplhhEA9EFkuWqpBs3eO MFYEOYnV4cRDx+/jp2aCxm+eQrpsWmh7j9r5MLJzi8F83HtyhpY++ROs X-Gm-Gg: AfdE7cnlbxvWkXPnwrgmGSZzG+Ku59NShW7oKGninu/A9Crs3JcYq/559l5Ymonbpxm 3ArOljxTEShhbk+B1gIbcPtCOmznjCXYElwEgfZinP97f89Aul2R/P0RuPMnn5ywTnriWStIZi4 lKp1PPLYWhzW0cyuTzgfHoxO24e+TvLQv0HudDwfaw9Hgc/3blJveqJKV0tdPJnT4hmTuEfQVyy tFGcI05/AywW7s6dJ1b3Tv7Yn1cmLA+3SRba8+8+xGJ3oJONbrgIVKDyaGRc9QeOpY9KXSi3Q3W anmPlGT4viGtancSWjgybc4/7nhG3OJe+JHlP2fNwFr7Jz7mTQiIonhxm/b0t04+TJsJFSvPF1E gNoXKE8DwjnTbjqD1mmpC2Ym+nd+P2HZrViV3C0kJJQZXmY10QTpV9B1XHGcrp9cArOC4TDveLX s3tVI9B538Jf0MnD0= X-Received: by 2002:a05:690c:260a:b0:80c:1df8:7c1c with SMTP id 00721157ae682-81ede47e7b2mr1725107b3.19.1784134297431; Wed, 15 Jul 2026 09:51:37 -0700 (PDT) Received: from [10.138.10.6] ([185.98.168.14]) by smtp.gmail.com with ESMTPSA id 00721157ae682-81e6c1f11bbsm173715747b3.35.2026.07.15.09.51.36 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 15 Jul 2026 09:51:36 -0700 (PDT) Message-ID: <8dd0888b-d7be-4e75-b09c-ad4642a29efa@gmail.com> Date: Wed, 15 Jul 2026 12:51:22 -0400 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH] host/rootfs: Avoid using bwrap to enter new PID namespace To: Alyssa Ross References: <20260709-s6-pid-namespaces-v1-1-61a56abd1e7c@gmail.com> <87ldbiaoyh.fsf@alyssa.is> <47d40c5e-ef44-4101-857e-3f656f1d14bf@gmail.com> <87jyqz1cwq.fsf@alyssa.is> <6903a8b2-0932-4445-bf60-8a023e2f43c6@gmail.com> <87ik6g4l08.fsf@alyssa.is> Content-Language: en-US From: Demi Marie Obenour Autocrypt: addr=demiobenour@gmail.com; keydata= xsFNBFp+A0oBEADffj6anl9/BHhUSxGTICeVl2tob7hPDdhHNgPR4C8xlYt5q49yB+l2nipd aq+4Gk6FZfqC825TKl7eRpUjMriwle4r3R0ydSIGcy4M6eb0IcxmuPYfbWpr/si88QKgyGSV Z7GeNW1UnzTdhYHuFlk8dBSmB1fzhEYEk0RcJqg4AKoq6/3/UorR+FaSuVwT7rqzGrTlscnT DlPWgRzrQ3jssesI7sZLm82E3pJSgaUoCdCOlL7MMPCJwI8JpPlBedRpe9tfVyfu3euTPLPx wcV3L/cfWPGSL4PofBtB8NUU6QwYiQ9Hzx4xOyn67zW73/G0Q2vPPRst8LBDqlxLjbtx/WLR 6h3nBc3eyuZ+q62HS1pJ5EvUT1vjyJ1ySrqtUXWQ4XlZyoEFUfpJxJoN0A9HCxmHGVckzTRl 5FMWo8TCniHynNXsBtDQbabt7aNEOaAJdE7to0AH3T/Bvwzcp0ZJtBk0EM6YeMLtotUut7h2 Bkg1b//r6bTBswMBXVJ5H44Qf0+eKeUg7whSC9qpYOzzrm7+0r9F5u3qF8ZTx55TJc2g656C 9a1P1MYVysLvkLvS4H+crmxA/i08Tc1h+x9RRvqba4lSzZ6/Tmt60DPM5Sc4R0nSm9BBff0N m0bSNRS8InXdO1Aq3362QKX2NOwcL5YaStwODNyZUqF7izjK4QARAQABzTxEZW1pIE1hcmll IE9iZW5vdXIgKGxvdmVyIG9mIGNvZGluZykgPGRlbWlvYmVub3VyQGdtYWlsLmNvbT7CwXgE EwECACIFAlp+A0oCGwMGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJELKItV//nCLBhr8Q AK/xrb4wyi71xII2hkFBpT59ObLN+32FQT7R3lbZRjVFjc6yMUjOb1H/hJVxx+yo5gsSj5LS 9AwggioUSrcUKldfA/PKKai2mzTlUDxTcF3vKx6iMXKA6AqwAw4B57ZEJoMM6egm57TV19kz PMc879NV2nc6+elaKl+/kbVeD3qvBuEwsTe2Do3HAAdrfUG/j9erwIk6gha/Hp9yZlCnPTX+ VK+xifQqt8RtMqS5R/S8z0msJMI/ajNU03kFjOpqrYziv6OZLJ5cuKb3bZU5aoaRQRDzkFIR 6aqtFLTohTo20QywXwRa39uFaOT/0YMpNyel0kdOszFOykTEGI2u+kja35g9TkH90kkBTG+a EWttIht0Hy6YFmwjcAxisSakBuHnHuMSOiyRQLu43ej2+mDWgItLZ48Mu0C3IG1seeQDjEYP tqvyZ6bGkf2Vj+L6wLoLLIhRZxQOedqArIk/Sb2SzQYuxN44IDRt+3ZcDqsPppoKcxSyd1Ny 2tpvjYJXlfKmOYLhTWs8nwlAlSHX/c/jz/ywwf7eSvGknToo1Y0VpRtoxMaKW1nvH0OeCSVJ itfRP7YbiRVc2aNqWPCSgtqHAuVraBRbAFLKh9d2rKFB3BmynTUpc1BQLJP8+D5oNyb8Ts4x Xd3iV/uD8JLGJfYZIR7oGWFLP4uZ3tkneDfYzsFNBFp+A0oBEAC9ynZI9LU+uJkMeEJeJyQ/ 8VFkCJQPQZEsIGzOTlPnwvVna0AS86n2Z+rK7R/usYs5iJCZ55/JISWd8xD57ue0eB47bcJv VqGlObI2DEG8TwaW0O0duRhDgzMEL4t1KdRAepIESBEA/iPpI4gfUbVEIEQuqdqQyO4GAe+M kD0Hy5JH/0qgFmbaSegNTdQg5iqYjRZ3ttiswalql1/iSyv1WYeC1OAs+2BLOAT2NEggSiVO txEfgewsQtCWi8H1SoirakIfo45Hz0tk/Ad9ZWh2PvOGt97Ka85o4TLJxgJJqGEnqcFUZnJJ riwoaRIS8N2C8/nEM53jb1sH0gYddMU3QxY7dYNLIUrRKQeNkF30dK7V6JRH7pleRlf+wQcN fRAIUrNlatj9TxwivQrKnC9aIFFHEy/0mAgtrQShcMRmMgVlRoOA5B8RTulRLCmkafvwuhs6 dCxN0GNAORIVVFxjx9Vn7OqYPgwiofZ6SbEl0hgPyWBQvE85klFLZLoj7p+joDY1XNQztmfA rnJ9x+YV4igjWImINAZSlmEcYtd+xy3Li/8oeYDAqrsnrOjb+WvGhCykJk4urBog2LNtcyCj kTs7F+WeXGUo0NDhbd3Z6AyFfqeF7uJ3D5hlpX2nI9no/ugPrrTVoVZAgrrnNz0iZG2DVx46 x913pVKHl5mlYQARAQABwsFfBBgBAgAJBQJafgNKAhsMAAoJELKItV//nCLBwNIP/AiIHE8b oIqReFQyaMzxq6lE4YZCZNj65B/nkDOvodSiwfwjjVVE2V3iEzxMHbgyTCGA67+Bo/d5aQGj gn0TPtsGzelyQHipaUzEyrsceUGWYoKXYyVWKEfyh0cDfnd9diAm3VeNqchtcMpoehETH8fr RHnJdBcjf112PzQSdKC6kqU0Q196c4Vp5HDOQfNiDnTf7gZSj0BraHOByy9LEDCLhQiCmr+2 E0rW4tBtDAn2HkT9uf32ZGqJCn1O+2uVfFhGu6vPE5qkqrbSE8TG+03H8ecU2q50zgHWPdHM OBvy3EhzfAh2VmOSTcRK+tSUe/u3wdLRDPwv/DTzGI36Kgky9MsDC5gpIwNbOJP2G/q1wT1o Gkw4IXfWv2ufWiXqJ+k7HEi2N1sree7Dy9KBCqb+ca1vFhYPDJfhP75I/VnzHVssZ/rYZ9+5 1yDoUABoNdJNSGUYl+Yh9Pw9pE3Kt4EFzUlFZWbE4xKL/NPno+z4J9aWemLLszcYz/u3XnbO vUSQHSrmfOzX3cV4yfmjM5lewgSstoxGyTx2M8enslgdXhPthZlDnTnOT+C+OTsh8+m5tos8 HQjaPM01MKBiAqdPgksm1wu2DrrwUi6ChRVTUBcj6+/9IJ81H2P2gJk3Ls3AVIxIffLoY34E +MYSfkEjBz0E8CLOcAw7JIwAaeBT In-Reply-To: <87ik6g4l08.fsf@alyssa.is> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------5ovMd0mB9Dvot4cJqgfTo3M8" Message-ID-Hash: DTPWKOFY3BLBNOAGVMXOZNQCI5VWENNT X-Message-ID-Hash: DTPWKOFY3BLBNOAGVMXOZNQCI5VWENNT X-MailFrom: demiobenour@gmail.com X-Mailman-Rule-Hits: member-moderation X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-devel.spectrum-os.org-0; header-match-devel.spectrum-os.org-1; header-match-devel.spectrum-os.org-2; header-match-devel.spectrum-os.org-3; header-match-devel.spectrum-os.org-4; emergency CC: Spectrum OS Development X-Mailman-Version: 3.3.10 Precedence: list List-Id: Patches and low-level development discussion Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------5ovMd0mB9Dvot4cJqgfTo3M8 Content-Type: multipart/mixed; boundary="------------sZs6VdZ7t91h6oWSYBFgce3H"; protected-headers="v1"; hp="clear" Message-ID: <8dd0888b-d7be-4e75-b09c-ad4642a29efa@gmail.com> Date: Wed, 15 Jul 2026 12:51:22 -0400 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH] host/rootfs: Avoid using bwrap to enter new PID namespace To: Alyssa Ross Cc: Spectrum OS Development References: <20260709-s6-pid-namespaces-v1-1-61a56abd1e7c@gmail.com> <87ldbiaoyh.fsf@alyssa.is> <47d40c5e-ef44-4101-857e-3f656f1d14bf@gmail.com> <87jyqz1cwq.fsf@alyssa.is> <6903a8b2-0932-4445-bf60-8a023e2f43c6@gmail.com> <87ik6g4l08.fsf@alyssa.is> Content-Language: en-US From: Demi Marie Obenour Autocrypt: addr=demiobenour@gmail.com; keydata= xsFNBFp+A0oBEADffj6anl9/BHhUSxGTICeVl2tob7hPDdhHNgPR4C8xlYt5q49yB+l2nipd aq+4Gk6FZfqC825TKl7eRpUjMriwle4r3R0ydSIGcy4M6eb0IcxmuPYfbWpr/si88QKgyGSV Z7GeNW1UnzTdhYHuFlk8dBSmB1fzhEYEk0RcJqg4AKoq6/3/UorR+FaSuVwT7rqzGrTlscnT DlPWgRzrQ3jssesI7sZLm82E3pJSgaUoCdCOlL7MMPCJwI8JpPlBedRpe9tfVyfu3euTPLPx wcV3L/cfWPGSL4PofBtB8NUU6QwYiQ9Hzx4xOyn67zW73/G0Q2vPPRst8LBDqlxLjbtx/WLR 6h3nBc3eyuZ+q62HS1pJ5EvUT1vjyJ1ySrqtUXWQ4XlZyoEFUfpJxJoN0A9HCxmHGVckzTRl 5FMWo8TCniHynNXsBtDQbabt7aNEOaAJdE7to0AH3T/Bvwzcp0ZJtBk0EM6YeMLtotUut7h2 Bkg1b//r6bTBswMBXVJ5H44Qf0+eKeUg7whSC9qpYOzzrm7+0r9F5u3qF8ZTx55TJc2g656C 9a1P1MYVysLvkLvS4H+crmxA/i08Tc1h+x9RRvqba4lSzZ6/Tmt60DPM5Sc4R0nSm9BBff0N m0bSNRS8InXdO1Aq3362QKX2NOwcL5YaStwODNyZUqF7izjK4QARAQABzTxEZW1pIE1hcmll IE9iZW5vdXIgKGxvdmVyIG9mIGNvZGluZykgPGRlbWlvYmVub3VyQGdtYWlsLmNvbT7CwXgE EwECACIFAlp+A0oCGwMGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJELKItV//nCLBhr8Q AK/xrb4wyi71xII2hkFBpT59ObLN+32FQT7R3lbZRjVFjc6yMUjOb1H/hJVxx+yo5gsSj5LS 9AwggioUSrcUKldfA/PKKai2mzTlUDxTcF3vKx6iMXKA6AqwAw4B57ZEJoMM6egm57TV19kz PMc879NV2nc6+elaKl+/kbVeD3qvBuEwsTe2Do3HAAdrfUG/j9erwIk6gha/Hp9yZlCnPTX+ VK+xifQqt8RtMqS5R/S8z0msJMI/ajNU03kFjOpqrYziv6OZLJ5cuKb3bZU5aoaRQRDzkFIR 6aqtFLTohTo20QywXwRa39uFaOT/0YMpNyel0kdOszFOykTEGI2u+kja35g9TkH90kkBTG+a EWttIht0Hy6YFmwjcAxisSakBuHnHuMSOiyRQLu43ej2+mDWgItLZ48Mu0C3IG1seeQDjEYP tqvyZ6bGkf2Vj+L6wLoLLIhRZxQOedqArIk/Sb2SzQYuxN44IDRt+3ZcDqsPppoKcxSyd1Ny 2tpvjYJXlfKmOYLhTWs8nwlAlSHX/c/jz/ywwf7eSvGknToo1Y0VpRtoxMaKW1nvH0OeCSVJ itfRP7YbiRVc2aNqWPCSgtqHAuVraBRbAFLKh9d2rKFB3BmynTUpc1BQLJP8+D5oNyb8Ts4x Xd3iV/uD8JLGJfYZIR7oGWFLP4uZ3tkneDfYzsFNBFp+A0oBEAC9ynZI9LU+uJkMeEJeJyQ/ 8VFkCJQPQZEsIGzOTlPnwvVna0AS86n2Z+rK7R/usYs5iJCZ55/JISWd8xD57ue0eB47bcJv VqGlObI2DEG8TwaW0O0duRhDgzMEL4t1KdRAepIESBEA/iPpI4gfUbVEIEQuqdqQyO4GAe+M kD0Hy5JH/0qgFmbaSegNTdQg5iqYjRZ3ttiswalql1/iSyv1WYeC1OAs+2BLOAT2NEggSiVO txEfgewsQtCWi8H1SoirakIfo45Hz0tk/Ad9ZWh2PvOGt97Ka85o4TLJxgJJqGEnqcFUZnJJ riwoaRIS8N2C8/nEM53jb1sH0gYddMU3QxY7dYNLIUrRKQeNkF30dK7V6JRH7pleRlf+wQcN fRAIUrNlatj9TxwivQrKnC9aIFFHEy/0mAgtrQShcMRmMgVlRoOA5B8RTulRLCmkafvwuhs6 dCxN0GNAORIVVFxjx9Vn7OqYPgwiofZ6SbEl0hgPyWBQvE85klFLZLoj7p+joDY1XNQztmfA rnJ9x+YV4igjWImINAZSlmEcYtd+xy3Li/8oeYDAqrsnrOjb+WvGhCykJk4urBog2LNtcyCj kTs7F+WeXGUo0NDhbd3Z6AyFfqeF7uJ3D5hlpX2nI9no/ugPrrTVoVZAgrrnNz0iZG2DVx46 x913pVKHl5mlYQARAQABwsFfBBgBAgAJBQJafgNKAhsMAAoJELKItV//nCLBwNIP/AiIHE8b oIqReFQyaMzxq6lE4YZCZNj65B/nkDOvodSiwfwjjVVE2V3iEzxMHbgyTCGA67+Bo/d5aQGj gn0TPtsGzelyQHipaUzEyrsceUGWYoKXYyVWKEfyh0cDfnd9diAm3VeNqchtcMpoehETH8fr RHnJdBcjf112PzQSdKC6kqU0Q196c4Vp5HDOQfNiDnTf7gZSj0BraHOByy9LEDCLhQiCmr+2 E0rW4tBtDAn2HkT9uf32ZGqJCn1O+2uVfFhGu6vPE5qkqrbSE8TG+03H8ecU2q50zgHWPdHM OBvy3EhzfAh2VmOSTcRK+tSUe/u3wdLRDPwv/DTzGI36Kgky9MsDC5gpIwNbOJP2G/q1wT1o Gkw4IXfWv2ufWiXqJ+k7HEi2N1sree7Dy9KBCqb+ca1vFhYPDJfhP75I/VnzHVssZ/rYZ9+5 1yDoUABoNdJNSGUYl+Yh9Pw9pE3Kt4EFzUlFZWbE4xKL/NPno+z4J9aWemLLszcYz/u3XnbO vUSQHSrmfOzX3cV4yfmjM5lewgSstoxGyTx2M8enslgdXhPthZlDnTnOT+C+OTsh8+m5tos8 HQjaPM01MKBiAqdPgksm1wu2DrrwUi6ChRVTUBcj6+/9IJ81H2P2gJk3Ls3AVIxIffLoY34E +MYSfkEjBz0E8CLOcAw7JIwAaeBT In-Reply-To: <87ik6g4l08.fsf@alyssa.is> --------------sZs6VdZ7t91h6oWSYBFgce3H Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On 7/15/26 06:15, Alyssa Ross wrote: > Demi Marie Obenour writes: >=20 >> On 7/13/26 05:01, Alyssa Ross wrote: >>> Demi Marie Obenour writes: >>> >>>> On 7/10/26 10:39, Alyssa Ross wrote: >>>>> Demi Marie Obenour writes: >>>>> >>>>>> diff --git a/host/rootfs/image/etc/s6-linux-init/run-image/service= /vm-services/template/data/service/vhost-user-gpu/run b/host/rootfs/image= /etc/s6-linux-init/run-image/service/vm-services/template/data/service/vh= ost-user-gpu/run >>>>>> index c3bfafe02ec6d2ee418fe56b033bbc4c7a73b186..f5c0f15184f0e72457= f9c0bfa546590b9308eb9c 100755 >>>>>> --- a/host/rootfs/image/etc/s6-linux-init/run-image/service/vm-ser= vices/template/data/service/vhost-user-gpu/run >>>>>> +++ b/host/rootfs/image/etc/s6-linux-init/run-image/service/vm-ser= vices/template/data/service/vhost-user-gpu/run >>>>>> @@ -17,9 +17,10 @@ s6-applyuidgid -UzG 15 # wayland >>>>>> s6-ipcserverd -1c 1 >>>>>> =20 >>>>>> bwrap >>>>>> - --unshare-all >>>>>> - # --unshare-all only implies --unshare-user-try. >>>>>> - # Make this more than a "try". >>>>>> + --unshare-net >>>>>> + --unshare-ipc >>>>>> + --unshare-uts >>>>>> + --unshare-cgroup >>>>>> --unshare-user >>>>>> --bind $WAYLAND_DISPLAY $WAYLAND_DISPLAY >>>>>> --ro-bind /usr /usr >>>>> >>>>> There's a subtle behaviour change here. The pid namespace is reuse= d >>>>> between runs of crosvm, because if crosvm exits, s6-ipcserverd will= stay >>>>> running and wait for the next connection, then respawn crosvm. It'= s >>>>> done this way because crosvm has made the unusual decision to suppo= rt >>>>> being started on a connected socket, rather than a listening socket= like >>>>> one might expect. Is that okay? I'd guess yes, but I want to chec= k >>>>> with you! >>>> >>>> It's less robust than I would like, but there is no reason one canno= t >>>> have both s6-supervise and bubblewrap create PID namespaces. That's= >>>> the approach I would go with. >>> >>> What's the point of the intermediate PID namespace? >> >> Ensure that there are no stale Cloud Hypervisor processes left behind.= >> Specifically, the PTY watcher ought to be moved to the main process >> if there is only one PTY, but it=E2=80=99s currently a separate proces= s. >=20 > Huh? This is a discussion about the vhost-user-gpu service, which runs= > crosvm via s6-ipcserver. Cloud Hypervisor and PTY watchers are not > involved. Whoops, that was my mistake! --=20 Sincerely, Demi Marie Obenour (she/her/hers) --------------sZs6VdZ7t91h6oWSYBFgce3H-- --------------5ovMd0mB9Dvot4cJqgfTo3M8 Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEopQtqVJW1aeuo9/sszaHOrMp8lMFAmpXupQACgkQszaHOrMp 8lMm1A//WTsj5NsjGLACbfbWVc3gkJOpB5CCMN0w8nivBkdZIlCALxkIPfjcRz+v OGm/OhmU2xqaLfzveaqSTRxATV4kyQ9Z+jl8gD2KUhWZZQfGNK2u2wFBxLz9jnzf uFfpZwQWPtgHpW5zvZDyqt1AsCgXUGEMb21vCfzmD7tsfys0GySWlmp9zoVp2TXg vKwNLfucOtNqrIkAxuAPUBdF+vw9mflRKvpOjNMeS1LCz3xipUkdpcx5TJZ6852J ITBlRz2j8GNw1BNgXlFElyh9pX51ufnyIol/250y0Ka4QW2ZRfRCUJnoNTOexaM+ IaTSq4q2PJc8nlM9r7BFKbpXYaugPfiTSIcB9AF+/+M4aEX7FVkXadkQYdPVebIO UXy08aVAn9rIKrOcet2vpkzizckxr/eW2MEKdnp/uOknJiY1k2rpLwasbZ/gXhSC MdvnP7EF4eM9RpgD1iEe+xqf8PkQC/N0f4J/SjsG4RpQZ3BJjCBcPh+YIt5xrltS VFzHTED+L/shXf2gSLjvdDG+TLYy3N70JQzisH5Jt0W84AH+/BwVD97963X2rGVs ZkeHIcaPxlJ24dQ007BnSs95G2Ygv/cdBVoCwgQNSB4Ul0pLq6j/Mwt1E8iGvW1m DWaxwGaJj7PP8KUBpB9QqRb93fSZC1zvXDKZIe2w3xZVmNgulNE= =qiko -----END PGP SIGNATURE----- --------------5ovMd0mB9Dvot4cJqgfTo3M8--