norman.walsh.name: Comments on /2003/08/22/chroot http://norman.walsh.name/2003/08/22/chroot/comments.atom 2004-12-11T01:56:34Z Comment 0001 on /2003/08/22/chroot http://norman.walsh.name/2003/08/22/chroot#comment0001 2003-08-23T01:50:59Z 2003-08-23T01:50:59Z Dominic Mitchell b90fac64132c0906001c39315b03e1a4bfd1fba6 http://happygiraffe.net/

Damn, that's a neat solution. I like it. However, I reckon that you could have got away without mounting /tmp, and perhaps using the X's network transparency by connecting to localhost:0.0 instead of just :0.0. With a modern tcp stack the overhead shouldn't be much more than a Unix domain socket.

Anyway, nice work.

-Dom

 Comment 2 on /2003/08/22/chroot http://norman.walsh.name/2003/08/22/chroot#comment0002 2004-12-11T01:56:33Z 2004-12-11T01:56:33Z C. Scott Ananian 0d89d22b45bd82ead68ba4ad8d59cd827384b409 http://cscott.net

Rock on! That --bind option is just what I was looking for. The --move option to mount looks pretty interesting, too --- a few months ago I was looking for a way to atomically update an entire webserver root in order to do atomic software upgrades, and that might just do it (create upgrade in new temp dir, mount --move it over the existing root, upgrade the (hidden) existing root, umount the temp dir).