aristanetworks / bst

A one-stop shop for process isolation
MIT License
101 stars 9 forks source link

Add --unshare counterparts to --share #29

Closed Snaipe closed 4 years ago

Snaipe commented 4 years ago

Normally, all namespaces are unshared by default, but the lack of --unshare options makes it hard to only unshare a select few while keeping the rest. This is mostly made visible when trying to re-enter a persisted spacetime whose init died -- in which case, you need to unshare a new PID namespace.

With this, we could call bst --share-all=<path> --unshare-pid. Right now, the alternative is to either unpersist the pid ns file, or manually pass all --share flags individually.