search

containers / bubblewrap

Low-level unprivileged sandboxing tool used by Flatpak and similar projects
Other
3.9k stars 238 forks source link

[Feature request] Joining a netns or create an ns connected to an interface #361

Open garywill opened 4 years ago

garywill commented 4 years ago

Wish a feature like firejail's :

    --net=bridgename - enable network namespaces and connect to this bridge.
    --net=ethernet_interface - enable network namespaces and connect to this
    Ethernet interface.
    --net=none - enable a new, unconnected network namespace.
    --netns=name - Run the program in a named, persistent network namespace.

We able to choose a network namespace to join. Or create a network namespace with an interface connected/bridged to one specified interface.

oxwivi commented 3 years ago

Yes, please. I came here to make a similar request, so that flatpaks maybe selectively allowed to access VPN or LAN only.