From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: passt.top; dmarc=none (p=none dis=none) header.from=korneck.de Authentication-Results: passt.top; dkim=pass (2048-bit key; unprotected) header.d=korneck-de.20251104.gappssmtp.com header.i=@korneck-de.20251104.gappssmtp.com header.a=rsa-sha256 header.s=20251104 header.b=jA/IIcCA; dkim-atps=neutral Received: from mail-yx2-x11.google.com (mail-yx2-x11.google.com [IPv6:2607:f8b0:4864:41::11]) by passt.top (Postfix) with ESMTPS id 7D4935A0265 for ; Thu, 17 Sep 2026 18:25:34 +0200 (CEST) Received: by mail-yx2-x11.google.com with SMTP id 956f58d0204a3-66e4aac929eso1005879d50.0 for ; Thu, 17 Sep 2026 09:25:34 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1789662333; cv=none; d=google.com; s=arc-20260327; b=koVeIHpoUeakEYhJQ2M/Z98K0tvmXLaqYrF9GR7Gdxfnxs+c1cgPtDpqccRC86dKza z1WM1D2/k54PDIGg5q9a8xCcz7C4pq+jpJAiUOIEdq4n9+uFFDtHWI0FA/PamqJDClNi TH4JnWdp4qO46hRmz1IVRNYArqsg0wIoqgtgGqGXKg+hdWxE++qbb46IBZekkNOc1dTN KnZ83kWm7lV6jQiS1kdkzjPmxDl9a+RDwzX1aUCGhH+5nGCQ8nS/cbmm3uMIxv1l9Z1A fCGmX0+dRrhSStEWF6yM8ph9dEFUyDCxyNdvdQXToDhixt/fKJrozIHkWUzr2v2iReWg jYnw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=EAsmGNvO/sqn3fE/iI2vEJ//c9FvBylhP4b19O8XKuw=; fh=LixnwuzT+5G9Nq3t1Tdkvl+TM3eOhuGYMY9jbNbitzc=; b=WXkDgGhWvF8HXsgMw8HHP/w3Ax5HEfiuFyqE0qQmyu3lY/K3GbSydb0keiuOnsDAab GB6cO4D1poKmOc2vPcjP9Ev0pReQC42gE26n7DWuufmOBnN2hEBevmviy1BEYl1t4ZRI 0CqGzF6pnbZQVMrFoy5EcQYUs7Z1Q5ANmPdAFFJYKMxSRnQ9X+0OOR3tZ9Au1iC3Qt5r BTjJhhCIx4GInTRnAK3sba+fE+nDxWJ33es1bqegEsOQ/8VLd0eC6Br+9cgljAoeY4QL xLiFnEAfttkyhvIQHnrCOEWRTIGWzGLt96kZP2QUtXd4YOLMIdd3eJWzxjanmOhrj02i UbMQ==; darn=passt.top ARC-Authentication-Results: i=1; mx.google.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=korneck-de.20251104.gappssmtp.com; s=20251104; t=1789662333; x=1790267133; darn=passt.top; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=EAsmGNvO/sqn3fE/iI2vEJ//c9FvBylhP4b19O8XKuw=; b=jA/IIcCApl8BM8dtS+DNpCVBuZ41rIbZUXoN8o9KXySBd4cIvaO88oDc6cd6Q5wGXa E2jB26fdicfqGVrudEygJ+4qjCIU/ghixFcRnFQGeRnFFd1Tvfm7xNQ5CW88TNaKwu2C 6vur+bZ2FIE9/gCoN6QNQXdLpecYqRoUzkI5uD5XBUJEvDf+ZTYgZGqiDHeqUIuT7MEZ zHRe1W1cBkTqxylLgxC/47UdybYwKCaEGo85Of496rOp//8bipa5fX5g038LlbuD8weU iTqDhgDwNOBNzhQVg5PVSG5SRGfnxBW+zaVUMgGlz8Xv2TJt/JdhieFpuZWu0HDReaKV WHaQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1789662333; x=1790267133; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=EAsmGNvO/sqn3fE/iI2vEJ//c9FvBylhP4b19O8XKuw=; b=VP8cTyZgslN9AGyDyFbXZfIqC0dNAbd/BOc2q9eb8lfKlIRAKzBatdxmvOPk5hkD74 7Hf9t4Vt6LMKljz2vbS0Ni6zl1Glbd1cjQt1B+YnVF3/VXf2fv4OLpDQ4OLOBIO6xO0w M+bWry2V0K97ODBbXhAw9TnUbLOo0xGO5uxaRKoMuoaXwLNMb2cIMPSycjInYkLONmBU CL+xIRA5A53f0mSNEtoVYfscO+mrwM9iKixKrdVMFjzTdDPfwwh26kyugMnDzyPaOqWr AQSyHYCxdzqVbMH6dMx+7dqICezoT6zB7MAde9Fh/KkrohJkwXl1EGPySsGLOhoLyXas Nz/Q== X-Gm-Message-State: AFuF++mTLVr6O0UBmckkAEx1pi4hIcS04aE2g0VzJNO6op3203nXZvcL rYEYkpVchouj7Nr/7RY1/L2y4/7Ik63/KIw6mHvMRpBiCqH6f8qxSZ0uxMxcn6Q3sHF+jUsD/8n pD7BNifAwJND6Ij0ADFwBX0PhUM6mHywuXSE81hkU X-Gm-Gg: AYBFou0SotB9AvdecaRLghRGjyITMi+QmIgcx6YMdFoTQBQqBEqTZYr22Vj3CAInOj3 kcMKNf5EiTfHhaKLwk/YwNb3C77YoEL/dbyUMXW23OZ8mrercDKbyLt9fGbo33vM+I9Hoop0dWj 9yRzgEG3Qef2wcjQSF9k9Dy0Rq6QPPJHwk9AYtBHxHE5ZPX9R2i16OUkQ/Ui21SWM5vtBoi7egs KsQhvmUm0nbdpv2HI5HHeXQZlfJpykaw4icqwyRVUeSSYlS2kKYfIU71/DIMP4pyDE44+LghiqB RhRzqYoY34Bt5ussmONFl4oPcxZjaOSRu25O5xE+KG2ls/aJbvClOVaFl6pflUSQxBq+Ziz5way OUwTvAe8TcUE= X-Received: by 2002:a05:690e:11c3:b0:671:17e2:ea06 with SMTP id 956f58d0204a3-671632ae9d6mr2383756d50.47.1789662333103; Thu, 17 Sep 2026 09:25:33 -0700 (PDT) MIME-Version: 1.0 References: <20260906131758.121019-1-christian@korneck.de> <20260916105050.5e4bb12d@elisabeth> In-Reply-To: <20260916105050.5e4bb12d@elisabeth> From: Christian Korneck Date: Thu, 17 Sep 2026 18:25:21 +0200 X-Gm-Features: AcwNN1WjyyN-_9wXbUMdbYSflqYG8t0dHFEZgMyssXAKy-mua1tVeUZazQnGGjY Message-ID: Subject: Re: [PATCH] pasta: Add --no-pidns to keep spawned command in caller's PID namespace To: Stefano Brivio Content-Type: multipart/alternative; boundary="000000000000a2003a065bb03b15" Message-ID-Hash: FVW5JOJAAAAM3T2NY5WKF4QHL36EZ65M X-Message-ID-Hash: FVW5JOJAAAAM3T2NY5WKF4QHL36EZ65M X-MailFrom: christian@korneck.de X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: passt-dev@passt.top, David Gibson X-Mailman-Version: 3.3.8 Precedence: list List-Id: Development discussion and patches for passt Archived-At: Archived-At: List-Archive: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: --000000000000a2003a065bb03b15 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Wed, Sep 16, 2026 at 10:50=E2=80=AFAM Stefano Brivio wrote: > > Applied, thanks for the patch, and welcome to the git log! > Apologies for my late response. I really appreciate both the good comments and the merge. On Tue, Sep 8, 2026 at 8:03=E2=80=AFAM David Gibson wrote: > Note that it > is always possible to create a namespace using unshare(1) with > arbitrary options and then connect it with pasta, rather than having > pasta create its own. > Just a brief comment on my motivation here. I like to use pasta's spawn mode in "low effort" things like shell scripts. Creating a namespace and connecting it to pasta requires (imho) more effort as it inverts the process model. A wrapper that simply execs the command inside the namespaces can't start pasta afterwards: Something outside has to fork, wait for the namespaces to exist, start pasta against the PID, then signal the command that networking is up, and stay around to tie pasta's lifetime to the command's. Spawn mode already does all of that in the right order with one process and no handshake to get wrong. --no-pidns keeps that and only drops the one namespace that can't work inside a container. Again, thank you so much for accepting the patch. -- Chris --000000000000a2003a065bb03b15 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
On Wed, Sep 16, 2026 at 10:50=E2=80=AFAM Stefano Brivio <sbrivio@redhat.com> wrote:

Applied, thanks for the patch, and welcome to the git log!
=

Apologies for my late response. I really appreciate bot= h the good comments and the merge.

On Tue, Sep 8, 2026 at 8:03=E2=80=AFAM David Gibson = <david@gibson.dropbear.id= .au> wrote:
Note that it
is always possible to create a namespace using unshare(1= ) with
arbitrary options and then connect it with pasta, rather than hav= ing
pasta create its own.

Just= a brief comment on my motivation here. I like to use pasta's spawn mod= e in
"low effort" things like shell scripts.
=
Creating a namespace and connecting it to pasta requires (im= ho) more effort as
it=C2=A0inverts the process model. A wrapper that simply
execs t= he command inside the namespaces can't start p= asta afterwards:
Something outside has to fork, wait for the name= spaces to exist, start
pasta against the= PID, then signal the command that networking is up,
and stay around to = tie pasta's lifetime to the command'= ;s. Spawn mode
already does all of that in the right order with one proc= ess and no
handshake to get wrong. --no-pidns keeps that and only drops = the one
namespace that can't work inside a container.

Again, thank you so much for accepting the patch.

--
Chris
--000000000000a2003a065bb03b15--