Sample use cases on Ubuntu 16.04 (x86-64) about nsjail HOT 6 CLOSED

So, --chroot is not required, it merely says

Bind /chroot as the new /

This should work

$ ./nsjail -Ml --port 9000 --user 99999 --group 99999  -R /bin/ -R /lib -R /lib64/  -- /bin/sh -i

from nsjail.

Also, ldd is your friend when assessing which directories to include

$ ldd /bin/sh
	linux-vdso.so.1 =>  (0x00007ffc20bdb000)
	libtinfo.so.5 => /lib/x86_64-linux-gnu/libtinfo.so.5 (0x00007fc2d9ff4000)
	libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007fc2d9df0000)
	libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007fc2d9a27000)
	/lib64/ld-linux-x86-64.so.2 (0x000056244eb4e000)

from nsjail.

Ah.. you mean the README.md example? Let me check...

Ok... the assumption here is that you have a valid file-system inside /chroot - that you can install e.g. via debootstrap

from nsjail.

Thanks @robertswiecki, maybe it is meant to be like this(?):

./nsjail -Ml --port 9000 --user 99999 --group 99999  --chroot /   -- /bin/sh -i

Anyway, getting an error message on the first try is probably not desirable.
I also suggest to add a short build instruction with the list of needed packages.
I found Dockerfile helpful.

from nsjail.

Just started using nsjail to sandbox some python scripts and it was disappointing to see strange errors for the basic use cases in README.md. Now it is clear. :) Thanks.

• Suggestion: it is time saving and reassuring if basic use cases are well explained and straightforward to test.

from nsjail.

Thanks.

I've done some README.md changes in ed2bf6e - Hope this helps.

from nsjail.