@wrosecrans I would put that shit inside a user+mount+net namespace and tunnel into it with veth or tun/tap...