3 # This boot scripts runs a service subhost as defined by the
4 # configuration file named on the command line.
5 # See "man overlay-boot" for details.
8 PROGRAMDIR="$(dirname $(realpath $0))"
9 . $PROGRAMDIR/functions
13 if [ -z "$UNSHARED" ] ; then
14 if [ ! -r /run/netns/$NAME ] ; then
16 ip netns exec $NAME ip link set lo up || exit 1
18 exec env UNSHARED=yes unshare -m $0 $@ > $LOG 2>&1 &
19 echo "Logging to $LOG" >&2
24 setup_veth_cables $NAME $CABLES
25 setup_overlay "$NAME" "$LIVE" "$LOWER" "$UPPER" "$WORK"
26 setup_cgroup2_accounting "$NAME" "$$"
30 [ "$UPPER" != "$LIVE" ] && umount -R "$LIVE"
34 # This process has an unshared mount namespace, so we unmount almost
35 # everything before chroot. Exceptions are: $LIVE and anything mounted
36 # below that, "/run/netns/$NAME" and its parent paths (incidentally
37 # including "/" as well) and "/proc".
38 sort -rk2,2 < /proc/mounts | while read D P A2 ; do
39 beginswith "$P" "$LIVE" && continue
40 beginswith "/run/netns/$NAME" "$P" && continue
41 [ "$P" = /proc ] && continue
46 env CONFIG="$CONFIG" $INIT | \
47 unshare -fp --mount-proc -i -u \
48 ip netns exec $NAME chroot $LIVE /bin/sh