Re: Generating wrappers for execution in non-root non-Guix contexts

[Ludovic Courtès]

Hey!

Ricardo Wurmus <address@hidden> skribis:

>> We could also have wrappers fall back to PRoot when unshare(2) fails.
>
> Good idea.  Could we use ptrace directly and optimize it for the case of
> “/gnu/store” paths?  I’m just guessing that PRoot may incur a higher
> performance penalty because it’s so generic compared to a compile-time
> deterministic use of ptrace – after all, we know all /gnu/store
> locations in advance.

IWBN, but that’s a project in its own.  ptrace(2) requires knowledge
about the architecture’s ABI so that you know what registers to look at
when a syscall happens, and so on.  So for now it’ll have to be PRoot.

I’ll try to come up with a patch set without PRoot support to begin
with.

Thanks for your feedback,
Ludo’.