Use a separate network namespace

This commit is contained in:
Jonathan Schleifer 2021-08-06 22:24:53 +02:00
parent ae429be907
commit 0e04e6eda5
No known key found for this signature in database
GPG key ID: 636703577395312F

View file

@ -36,10 +36,13 @@ if [ ! -d "$HOME/.bubblewine" ]; then
WINEPREFIX="$HOME/.bubblewine" wineserver -k
fi
xsocket="/tmp/.X11-unix/X${DISPLAY#:}"
bwrap \
--unshare-user \
--unshare-ipc \
--unshare-pid \
--unshare-net \
--unshare-uts \
--unshare-cgroup \
--new-session \
@ -61,5 +64,6 @@ bwrap \
--proc /proc \
--tmpfs /tmp \
--bind "$HOME/.bubblewine" /wineprefix \
--bind "$xsocket" "$xsocket" \
--setenv WINEPREFIX /wineprefix \
wine "$@"