Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Tuesday, 26-Nov-2024 23:51:16 JST

@wolf480pl @quad I should try poking around again but a quick one with bwrap --unshare-user --bind / / --uid 0 /bin/sh (without bwrap being suid, and having CONFIG_USER_NS=y in my kernel) seems similar to fakeroot where id -u returns 0 but you don't actually have elevated privileges (in fact I seem to end up close to like the nobody user as even the commands of my users fail).