Re: [PLUG] ctmg: Simple wrapper around cryptsetup for encrypted containers

[Rich Freeman <r-plug@thefreemanclan.net>]

On Tue, Feb 23, 2016 at 10:13 PM, JP Vossen <jp@jpsdomain.org> wrote:
>
> I like the docs I read and the fact that it's bash so you can easily dissect
> the commands.  And *seems* simpler than other solutions I've seen, but I
> could just be forgetting things again.
>

Hopefully the impression that came across in the talk is that
namespaces actually are simple.  You could actually implement
something like nspawn in bash fairly easily I imagine.

There is a lot of stuff you need to do in practice to launch a
container that I didn't talk about, like drop some capabilities (not
entirely essential, but I forget offhand if the kernel will otherwise
prevent your container running shutdown from actually powering off the
motherboard), set up /dev, /proc, /sys, and so on.  If you're not
using a network namespace or don't need networking in your container
it probably wouldn't take you long to build all that yourself just
from my slide deck as setting up all of that stuff is really nothing
new.

In the end, a container is just like a chroot - a bunch of processes
that were launched with some attributes tweaked.

-- 
Rich
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug