Re: Generating wrappers for execution in non-root non-Guix contexts

2018-05-03 Thread Ludovic Courtès
ludovic.cour...@inria.fr (Ludovic Courtès) skribis: > The hack below allows ‘guix pack’ to produce wrappers that allow, > through user namespaces, programs to automatically relocate themselves > when you run them unprivileged on a machine that lacks Guix. In the > example below, I run ‘sed’ from

Re: Generating wrappers for execution in non-root non-Guix contexts

2018-04-27 Thread Ludovic Courtès
Hello! Chris Marusich skribis: > ludovic.cour...@inria.fr (Ludovic Courtès) writes: > >> Hello Guix! >> >> The hack below allows ‘guix pack’ to produce wrappers that allow, >> through user namespaces, programs to automatically relocate themselves >> when you run them unprivileged on a machine th

Re: Generating wrappers for execution in non-root non-Guix contexts

2018-04-26 Thread Chris Marusich
ludovic.cour...@inria.fr (Ludovic Courtès) writes: > Hello Guix! > > The hack below allows ‘guix pack’ to produce wrappers that allow, > through user namespaces, programs to automatically relocate themselves > when you run them unprivileged on a machine that lacks Guix. That's really cool! I've

Re: Generating wrappers for execution in non-root non-Guix contexts

2018-04-26 Thread Ludovic Courtès
Hey! Ricardo Wurmus skribis: >> We could also have wrappers fall back to PRoot when unshare(2) fails. > > Good idea. Could we use ptrace directly and optimize it for the case of > “/gnu/store” paths? I’m just guessing that PRoot may incur a higher > performance penalty because it’s so generic

Re: Generating wrappers for execution in non-root non-Guix contexts

2018-04-26 Thread Ricardo Wurmus
Hi Ludo, > The hack below allows ‘guix pack’ to produce wrappers that allow, > through user namespaces, programs to automatically relocate themselves > when you run them unprivileged on a machine that lacks Guix. This is very cool and very useful! It would make “guix pack” much more useful than

Re: Generating wrappers for execution in non-root non-Guix contexts

2018-04-25 Thread Ludovic Courtès
Pierre Neidhardt skribis: > Brilliant! > > Would this only work for C-based programs? No, it works for everything. It’s brute-force I must say. :-) Ludo’.

Re: Generating wrappers for execution in non-root non-Guix contexts

2018-04-25 Thread Pierre Neidhardt
Brilliant! Would this only work for C-based programs? What about other languages, shared libaries, external resources, etc.? -- Pierre Neidhardt The only "ism" Hollywood believes in is plagiarism. -- Dorothy Parker signature.asc Description: PGP signature

Generating wrappers for execution in non-root non-Guix contexts

2018-04-25 Thread Ludovic Courtès
Hello Guix! The hack below allows ‘guix pack’ to produce wrappers that allow, through user namespaces, programs to automatically relocate themselves when you run them unprivileged on a machine that lacks Guix. In the example below, I run ‘sed’ from a pack on a machine that lacks Guix: --8<--