Egress for the syscall runtime (network namespace to the same proxy) issue #61
open andymccall opened this · 0 comments
andymccall
issue #55 built allow-listed egress for microVM jobs only; the parser refuses network "egress" with runtime "syscall". The issue's text planned the same proxy for the syscall tier via a network namespace (a veth or a Unix socket bridged in). Needs design: the syscall sandbox has no network namespace of its own today.
issue #55 built allow-listed egress for microVM jobs only; the parser refuses network "egress" with runtime "syscall". The issue's text planned the same proxy for the syscall tier via a network namespace (a veth or a Unix socket bridged in). Needs design: the syscall sandbox has no network namespace of its own today.