Re: [PATCH] pasta: Add --no-pidns to keep spawned command in caller's PID namespace

[Christian Korneck <christian@korneck.de>]

[-- Attachment #1: Type: text/plain, Size: 1311 bytes --]

On Wed, Sep 16, 2026 at 10:50 AM Stefano Brivio <sbrivio@redhat.com> wrote:

>
> Applied, thanks for the patch, and welcome to the git log!
>

Apologies for my late response. I really appreciate both the good comments
and the merge.

On Tue, Sep 8, 2026 at 8:03 AM David Gibson <david@gibson.dropbear.id.au>
wrote:

> Note that it
> is always possible to create a namespace using unshare(1) with
> arbitrary options and then connect it with pasta, rather than having
> pasta create its own.
>

Just a brief comment on my motivation here. I like to use pasta's spawn
mode in
"low effort" things like shell scripts.

Creating a namespace and connecting it to pasta requires (imho) more effort
as
it inverts the process model. A wrapper that simply
execs the command inside the namespaces can't start pasta afterwards:
Something outside has to fork, wait for the namespaces to exist, start
pasta against the PID, then signal the command that networking is up,
and stay around to tie pasta's lifetime to the command's. Spawn mode
already does all of that in the right order with one process and no
handshake to get wrong. --no-pidns keeps that and only drops the one
namespace that can't work inside a container.

Again, thank you so much for accepting the patch.

--
Chris

[-- Attachment #2: Type: text/html, Size: 2410 bytes --]