Re: chroot for go webserver with pledge and unveil

[Nick Holland]

On 3/15/22 6:32 PM, i...@tutanota.com wrote:
...

$ doas chroot -u www -g www /var/www /bin/go-server

But that wouldn't keep it running after a reboot.

The "easy" and historic way:
  man 8 rc
  more specifically, rc.local

The "better" way:
  man 8 rc.d
  (and read the "see also"s.)

Probably going to need to set up a "wrapper" script to do your
chroot'ing.  But that's easy.

Dang, I just realized I need to migrate some old stuff from
rc.local to rc.d.

Nick.