WIP: Chroot

This commit is contained in:
Jeremy Soller 2016-11-25 15:42:26 -07:00
parent 657394a7cb
commit 67be2fa297

View file

@ -1,17 +1,25 @@
extern crate syscall; extern crate syscall;
use std::env;
use std::os::unix::process::CommandExt; use std::os::unix::process::CommandExt;
use std::process::Command; use std::process::Command;
pub fn main() { pub fn main() {
let names = [ let mut args = env::args().skip(1);
"file",
let root = args.next();
let cmd = args.next().unwrap_or("sh".to_string());
let mut names = vec![
"rand", "rand",
"tcp", "tcp",
"udp" "udp"
]; ];
let command = "sh"; if root.is_none() {
names.push("file");
}
let mut name_ptrs = Vec::new(); let mut name_ptrs = Vec::new();
for name in names.iter() { for name in names.iter() {
@ -24,11 +32,16 @@ pub fn main() {
if pid == 0 { if pid == 0 {
syscall::setrens(new_ns, new_ns).unwrap(); syscall::setrens(new_ns, new_ns).unwrap();
println!("Container {}: enter: {}", new_ns, command); println!("Container {}: enter: {}", new_ns, cmd);
let err = Command::new(command).exec(); let mut command = Command::new(&cmd);
for arg in args {
command.arg(&arg);
}
panic!("contain: failed to launch {}: {}", command, err); let err = command.exec();
panic!("contain: failed to launch {}: {}", cmd, err);
} else { } else {
let mut status = 0; let mut status = 0;
syscall::waitpid(pid, &mut status, 0).unwrap(); syscall::waitpid(pid, &mut status, 0).unwrap();