In Linux container runtimes, typically netlink is used with network namespaces to manage the interfaces and addresses for a container. This typically involves briefly joining the network namespace to perform actions like socket(AF_NETLINK, ...).
It would be nice to find a similar approach on FreeBSD to replace the 'jexec ifconfig ...' approach which I'm using now. Is there any way to get a netlink socket that connects to a specific vnet? This would be cleaner, more efficient and would simplify porting the Linux runtimes to FreeBSD.