rootless-containers / rootlesskit

Linux-native "fake root" for implementing rootless containers
Apache License 2.0
990 stars 98 forks source link

feat: add new none network #430

Closed antrusd closed 7 months ago

antrusd commented 8 months ago

This PR will add net none driver support. The driver almost similar with host but only provide lo interface configured. This is follow up from https://github.com/rootless-containers/rootlesskit/pull/427 .

AkihiroSuda commented 7 months ago
$ rootlesskit --net=none bash
WARN[0000] [rootlesskit:parent] specifying --disable-host-loopback is highly recommended to prohibit connecting to 127.0.0.1:* on the host namespace (requires pasta, slirp4netns, or VPNKit) 

This warning should not be printed for --net-none

antrusd commented 7 months ago
$ rootlesskit --net=none bash
WARN[0000] [rootlesskit:parent] specifying --disable-host-loopback is highly recommended to prohibit connecting to 127.0.0.1:* on the host namespace (requires pasta, slirp4netns, or VPNKit) 

This warning should not be printed for --net-none

Updated here