passt - Plug A Simple Socket Transport

	Commit message (Collapse)	Author	Age	Files	Lines
*	nstool: Add --keep-caps option to nstool exec	David Gibson	2023-04-08	1	-9/+78
\| \| \| \| \| \| \| \|	This allows you to run commands within a user namespace with the privilege that comes from owning that userns. Signed-off-by: David Gibson <david@gibson.dropbear.id.au> Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
*	nstool: Add nstool exec command to execute commands in an nstool namespace	David Gibson	2023-04-08	1	-2/+137
\| \| \| \| \| \| \| \| \|	This combines nstool info -pw <sock> with nsenter with various options for a more convenient and less verbose of entering existing nstool managed namespaces. Signed-off-by: David Gibson <david@gibson.dropbear.id.au> Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
*	nstool: Helpers to iterate through namespace types	David Gibson	2023-04-08	1	-10/+12
\| \| \| \| \| \| \|	Will make things a bit less verbose in future. Signed-off-by: David Gibson <david@gibson.dropbear.id.au> Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
*	nstool: Add magic number to advertized information	David Gibson	2023-04-08	1	-0/+9
\| \| \| \| \| \| \| \|	So that we'll probably give a better error if you point it at something that's not an nstool hold control socket. Signed-off-by: David Gibson <david@gibson.dropbear.id.au> Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
*	nstool: Detect what namespaces target is in	David Gibson	2023-04-08	1	-14/+143
\| \| \| \| \| \| \| \| \| \|	Give nstool the ability to detect what namespaces the target process is in, relative to where it's called. That is, those namespace types for which the target is not in the same namespace as the caller. For now, just print this information with "info", which can be useful for debugging. Signed-off-by: David Gibson <david@gibson.dropbear.id.au> Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
*	nstool: Replace "pid" subcommand with "info" subcommand	David Gibson	2023-04-08	1	-11/+49
\| \| \| \| \| \| \| \| \|	The new subcommand gives more information about the holder process and its namespace, and may be further extended in future. Add some options which give the old behaviour for existing scripts. Signed-off-by: David Gibson <david@gibson.dropbear.id.au> Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
*	nstool: Split some command line parsing and socket setup to subcommands	David Gibson	2023-04-08	1	-34/+68
\| \| \| \| \| \| \| \|	This will make it easier to differentiate the options to those commands further in future. Signed-off-by: David Gibson <david@gibson.dropbear.id.au> Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
*	nstool: Move description of its operation modes from comment to usage	David Gibson	2023-04-08	1	-15/+11
\| \| \| \| \| \| \|	Easier to see it there. Signed-off-by: David Gibson <david@gibson.dropbear.id.au> Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
*	nstool: Reverse parameters to nstool	David Gibson	2023-04-08	1	-14/+14
\| \| \| \| \| \| \| \|	Having the "subcommand" first is more conventional and will make it more natural for future extensions I have planned. Signed-off-by: David Gibson <david@gibson.dropbear.id.au> Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
*	nstool: Rename nsholder to nstool	David Gibson	2023-04-08	1	-0/+139
	In preparation for extending what it does. Signed-off-by: David Gibson <david@gibson.dropbear.id.au> Signed-off-by: Stefano Brivio <sbrivio@redhat.com>