X-Git-Url: https://iankelling.org/git/?p=newns;a=blobdiff_plain;f=newns;h=b45c994987c208e9aa570552e2b8c85987c8c3fe;hp=6da77278eedc873e0f97babb4ad3367d5b24aff8;hb=9dfee15b74eeb623e0b907f35c1bdedb62dc88e8;hpb=49df8bd697275ea5d331efc114440a0fde964935 diff --git a/newns b/newns index 6da7727..b45c994 100755 --- a/newns +++ b/newns @@ -71,7 +71,15 @@ https://iankelling.org/git/?p=errhandle, set ERRHANDLE_PATH, or put it in a directory adjacent to the absolute, resolved directory this file is in. -Background: "ip netns new ..." also does a mount namespace, then bind +Background: + +This script does not make the namespace be named like ip does, because +the naming is not necessary, although it could have been done with some +more work. For debugging and joining the namespace with a bash shell, I +use nsenter -n -m -t $(pgrep PROCESS_IN_NAMESPACE). Note: if I knew how +to easily ask systemd what pid a unit has, i would do that. + +"ip netns new ..." also does a mount namespace, then bind mounts each file/dir in /etc/netns/NS_NAME to /etc/NS_NAME. Note, for openvpn having it's own resolv.conf by using it's user script which calls resolvconf, this doesn't help much. What we actually want to do is