Re: Application-specific networking

2020-11-18 Thread Samuel Sieb
On 11/18/20 8:52 AM, William Oliver wrote: I'd like to say thanks to everybody who responded. I don't know much about containers, so I'll have to do some self-educating to see if these are good solutions -- but they certainly look like a good place to dig around in. I appreciate the help. If I

Re: Application-specific networking

2020-11-18 Thread William Oliver
On Wed, 2020-11-18 at 11:51 +0100, Roberto Ragusa wrote: > [snip] > Very good idea, namespaces are a very powerful tool that many people > ignore. > > I sometimes want to run a program without allowing any network > access, > my approach is: > > unshare -n /bin/bash > > this will give you a shel

Re: Application-specific networking

2020-11-18 Thread Jorge Fábregas
On 11/18/20 6:51 AM, Roberto Ragusa wrote: > unshare -n /bin/bash > > this will give you a shell where everything can be run, but ifconfig > -a will show you that there is no network interfaces (localhost is > missing too). Never thought about that one. Great idea. > The idea of letting podman

Re: Application-specific networking

2020-11-18 Thread Roberto Ragusa
On 2020-11-17 20:14, Jorge Fábregas wrote: Ok, I've just did it now. I launched my VPN within a container. Then on my host I searched for the $PID of the process and then: nsenter -t $PID -n firefox Now Firefox shares the network namepsace of the running container (without having to create a

Re: Application-specific networking

2020-11-17 Thread Jorge Fábregas
On 11/17/20 6:22 PM, Patrick O'Callaghan wrote: > I've done this successfully using a VM, but not with a container. Can > you give step-by-step instructions? I'm not very familiar with the > container stuff other than basic uses of flatpak. Well there are no specific steps. It'll all depend on wh

Re: Application-specific networking

2020-11-17 Thread Cameron Simpson
On 17Nov2020 09:00, William Oliver wrote: >I normally use a VPN that routes through another country. This works >fine. However, a site I often use recently changed its security >policies and now will only allow connection from networks that claim to >be based in the US. So, in order to connect,

Re: Application-specific networking

2020-11-17 Thread Patrick O'Callaghan
On Tue, 2020-11-17 at 15:14 -0400, Jorge Fábregas wrote: > On 11/17/20 2:44 PM, Jorge Fábregas wrote: > > On 11/17/20 10:00 AM, William Oliver wrote: > > > Is this doable? Does anybody know where to look for info? > > > > What about running that 2nd VPN (US-based) within a standard container? > >

Re: Application-specific networking

2020-11-17 Thread Samuel Sieb
On 11/17/20 6:00 AM, William Oliver wrote: I normally use a VPN that routes through another country. This works fine. However, a site I often use recently changed its security policies and now will only allow connection from networks that claim to be based in the US. So, in order to connect, I

Re: Application-specific networking

2020-11-17 Thread Jorge Fábregas
On 11/17/20 2:44 PM, Jorge Fábregas wrote: > On 11/17/20 10:00 AM, William Oliver wrote: >> Is this doable? Does anybody know where to look for info? > > What about running that 2nd VPN (US-based) within a standard container? > Then open your needed apps "in that same network namespace"? (the >

Re: Application-specific networking

2020-11-17 Thread Jorge Fábregas
On 11/17/20 10:00 AM, William Oliver wrote: > Is this doable? Does anybody know where to look for info? What about running that 2nd VPN (US-based) within a standard container? Then open your needed apps "in that same network namespace"? (the network namespace of the container running the VPN).

Re: Application-specific networking

2020-11-17 Thread Barry Scott
> On 17 Nov 2020, at 14:00, William Oliver wrote: > > This isn't a fedora-specific question, but I don't know where to ask. > > If there's a fedora-specific answer, thanks, and if not, I'd > appreciate a pointer to the apprpropriate forum. > > I normally use a VPN that routes through another

Re: Application-specific networking

2020-11-17 Thread Patrick O'Callaghan
On Tue, 2020-11-17 at 09:00 -0500, William Oliver wrote: > This isn't a fedora-specific question, but I don't know where to ask. > > If there's a fedora-specific answer, thanks, and if not, I'd > appreciate a pointer to the apprpropriate forum. > > I normally use a VPN that routes through anothe

Application-specific networking

2020-11-17 Thread William Oliver
This isn't a fedora-specific question, but I don't know where to ask. If there's a fedora-specific answer, thanks, and if not, I'd appreciate a pointer to the apprpropriate forum. I normally use a VPN that routes through another country. This works fine. However, a site I often use recently ch