My basic idea is to implement a lightweight jail - just seperate out namespaces for process table and network interfaces etc - i'll be doing this anyway, but if there's a chance it could be used in base, i'll obviously have to conform to the upstream coding style and i'll license my work appropriately.
If there's no interest whatsoever, i'm more inclined to just doing it "my way" so to speak - i'll probably still license it under MIT or BSD (even if my usual preference is GPLv2, please don't flame) though, as I reckon a lot of people might find it useful. What I do not want to do of course is to make it some docker-style heavy monster On Mon, 28 Sept 2026 at 20:59, Janne Johansson <[email protected]> wrote: > Den mån 28 sep. 2026 kl 21:35 skrev Gwen Nelson <[email protected]>: > >> Hey all >> I'm considering implementing a jail-like subsystem for OpenBSD as part of >> restarting an old pubnix project. >> I don't mean porting or reproducing FreeBSD jails. I have some ideas for >> an implementation designed around OpenBSD's existing architecture and >> conventions. >> Before spending significant time developing it, I'd like to establish >> whether such a facility would be considered desirable in principle, >> assuming an implementation met the project's technical and code-quality >> standards. >> If there's no interest in such a facility upstream, that's fine; I'll >> design it as an external project instead. >> >> I'm particularly interested in whether this has been discussed >> previously, and whether there are architectural or policy reasons the >> project has deliberately avoided this kind of abstraction. >> > > Around the time for OpenBSD 4.4, Kristaps Dzonsons made "mult" work on > OpenBSD, enough for allowing sshd to run in such a "jail". > > Interview about the idea: > > https://bsdtalk.blogspot.com/2008/02/bsdtalk140-mult-project-with-kristaps.html > > In the end, sshd on OpenBSD probably fared better with pledge, unveil and > privsep, but I am sure someone would like to have jail-a-likes for network > services on OpenBSD given how popular the namespacing thing on linux and > FreeBSD jails have become. > > If it would ever go into base? No idea. > > -- > May the most significant bit of your life be positive. >
