Skip to content

Add styrojail#73

Merged
kaniini merged 22 commits intomainfrom
feature/styrojail
Feb 13, 2026
Merged

Add styrojail#73
kaniini merged 22 commits intomainfrom
feature/styrojail

Conversation

@kaniini
Copy link
Contributor

@kaniini kaniini commented Feb 13, 2026

styrojail is a frontend that allows easy use of styrolite to run various container-shaped things in a sandbox.

This is a rust port of a python implementation I made a while ago.

kaniini added 22 commits February 12, 2026 12:49
@kaniini
cargo: add clap-derive dependency
5b49002
@kaniini
styrojail: add skeleton
d2baab9 
Signed-off-by: Ariadne Conill <ariadne@ariadne.space>
@kaniini
styrojail: build default mount table
e73a1f8 
Signed-off-by: Ariadne Conill <ariadne@ariadne.space>
@kaniini
chore: add read-only mounts
805876d 
Signed-off-by: Ariadne Conill <ariadne@ariadne.space>
@kaniini
chore(runner): add Runner::exec
e962d3a 
Signed-off-by: Ariadne Conill <ariadne@ariadne.space>
@kaniini
feat(styrojail): wire up mounts
79c2dd8 
Signed-off-by: Ariadne Conill <ariadne@ariadne.space>
@kaniini
chore(mount): cleanup some mount(2) semantics
eec818c 
Signed-off-by: Ariadne Conill <ariadne@ariadne.space>
@kaniini
chore(wrap): if we are not changing our rootfs, do not pivot_root(2)
04e2971
@kaniini
chore(config): add CreateRequest.skip_two_stage_userns
8602b65 
Signed-off-by: Ariadne Conill <ariadne@ariadne.space>
@kaniini
chore(styrojail): use skip_two_stage_userns so unprivileged userns ca…
94ff55e 
…n be used

Signed-off-by: Ariadne Conill <ariadne@ariadne.space>
@kaniini
chore(wrap): hook up skip_two_stage_userns
7bda777 
Signed-off-by: Ariadne Conill <ariadne@ariadne.space>
@kaniini
chore(styrojail): clean up unused imports
9e8307a
@kaniini
chore(styrojail): sync host UID/GID
e28e61e 
Signed-off-by: Ariadne Conill <ariadne@ariadne.space>
@kaniini
chore(styrojail): sync UID/GID config
65454bf 
Signed-off-by: Ariadne Conill <ariadne@ariadne.space>
@kaniini
chore: cargo fmt
0d5f993
@kaniini
chore(mount): add wrappers for new-style Linux mount API
291f189 
Signed-off-by: Ariadne Conill <ariadne@ariadne.space>
@kaniini
chore(mount): use mount_setattr(2) instead of remounting to change mo…
8f0b6e7 
…unt flags

Signed-off-by: Ariadne Conill <ariadne@ariadne.space>
@kaniini
chore(mount): add Mountable::seal()
d244889 
Signed-off-by: Ariadne Conill <ariadne@ariadne.space>
@kaniini
feature(styrojail): add necessary hacks for / as detached mountpoint
b40abea
@kaniini
chore(wrap): defer mount configuration until UID/GID namespace has be…
97aca7c 
…en configured

Signed-off-by: Ariadne Conill <ariadne@ariadne.space>
@kaniini
chore(styrojail): set CWD explicitly
cef2016 
Signed-off-by: Ariadne Conill <ariadne@ariadne.space>
@kaniini
chore: cargo fmt
6b0dd81 
Signed-off-by: Ariadne Conill <ariadne@ariadne.space>
@kaniini kaniini requested review from azenla and bleggett February 13, 2026 02:36
azenla
azenla approved these changes Feb 13, 2026
View reviewed changes
Copy link
Member

@azenla azenla left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@kaniini kaniini merged commit 4e9a9cc into main Feb 13, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@azenla azenla azenla approved these changes

@bleggett bleggett Awaiting requested review from bleggett

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@kaniini @azenla

Comments