Add --unprivileged flag using proxy environment variables#34

Closed

blink-so[bot] wants to merge 34 commits intomainfrom

blink/add-unprivileged-flag

Commits on Sep 12, 2025

Add --unprivileged flag for rootless operation using user namespaces + iptables
blink-so[bot]
committed
Fix cross-compilation: Add stub for NewUserNamespaceLinux on non-Linux platforms
blink-so[bot]
committed
Simplify implementation: Remove enhanced APIs, update existing APIs directly
blink-so[bot]
committed
Revert to manual user namespace approach (better than rootlesskit for this use case)
blink-so[bot]
committed
Replace unshare command with SysProcAttr namespace creation
blink-so[bot]
committed
Update tool validation for SysProcAttr approach
blink-so[bot]
committed
Fix config directory issue: Add better root user detection and error handling
blink-so[bot]
committed
Add comprehensive troubleshooting guide and usage clarification
blink-so[bot]
committed
Add container-friendly config directory handling
blink-so[bot]
committed
Fix user detection in Coder workspace environments
blink-so[bot]
committed
Fix networking: Use localhost redirection instead of veth pairs
blink-so[bot]
committed
Add simple user namespace approach that avoids nsenter issues
blink-so[bot]
committed
Fix in place: Replace complex nsenter approach with direct SysProcAttr
blink-so[bot]
committed
Fix UID/GID mapping: Handle manually in script instead of Go SysProcAttr
blink-so[bot]
committed
Simplify to use unshare command directly for reliable namespace creation
blink-so[bot]
committed
Add DNS configuration and improve iptables rules for user namespace
blink-so[bot]
committed
Switch to proxy environment variables instead of iptables
blink-so[bot]
committed
Implement rootlesskit-inspired proxy-based approach
blink-so[bot]
committed
Fix proxy environment for transparent HTTPS proxy
blink-so[bot]
committed
Implement rootlesskit user space networking with iptables
blink-so[bot]
committed
Add proper networking setup with veth pair and DNS
blink-so[bot]
committed
Implement true unprivileged networking with slirp4netns
blink-so[bot]
committed
Require slirp4netns for --unprivileged mode
blink-so[bot]
committed
Fix slirp4netns integration with proper PID coordination
blink-so[bot]
committed
Fix proxy connectivity from slirp4netns namespace
blink-so[bot]
committed
Implement simple proxy forwarding with netcat
blink-so[bot]
committed
Fix proxy forwarding with socat and improved netcat compatibility
blink-so[bot]
committed
Fix format string arguments mismatch
blink-so[bot]
committed
Improve proxy forwarding with connectivity testing and reliable fallbacks
blink-so[bot]
committed
Clean slate: Remove all complex networking code to start fresh
blink-so[bot]
committed
Implement clean slirp4netns network jail with iptables traffic forwarding
blink-so[bot]
committed
Fix slirp4netns PID handling and add iptables fallback to proxy environment
blink-so[bot]
committed
Fix proxy environment to use slirp4netns gateway IP (10.0.2.2)
blink-so[bot]
committed
Simplify unprivileged mode to use proxy environment variables

blink-so[bot]
and
f0ssel
committed