Re: automatic creation of a chroot environment

From: Mario Marietto <marietto2008_at_gmail.com>
Date: Thu, 16 Jul 2026 22:06:22 UTC
>I also meant on my website - in these VN issues:
>- https://vermaden.wordpress.com/2026/05/25/valuable-news-2026-05-25/
>- https://vermaden.wordpress.com/2026/06/15/valuable-news-2026-06-15/

Thank you bro !

>Hi all,

>chroot_env (https://github.com/rozhuk-im/chroot_env) is a lightweight
>tmpfs+chroot sandbox for FreeBSD - no jails, no ZFS, RO by default,
noexec/nosuid >on anything writable. As the author notes, one thing it
doesn't touch is the >network stack: chroot(2) gives a sandboxed process
the same network access as >its user has on the host.

Someone read the code that I have provided for adding an opt-in network ACL
without pulling in jails or VNET ? My sensation is that it has been
forgotten for some reason. If it is not relevant for the project,let me
know. This is a way for me to understand if I have understood what's the
direction of the project. Anyway, I hope it can be useful.

Mario.

On Thu, Jul 16, 2026 at 11:01 PM vermaden <vermaden@interia.pl> wrote:

>
> > yes, thanks.
> > But I meant on your website, not on the FreeBSD forums.
>
> I also meant on my website - in these VN issues:
> - https://vermaden.wordpress.com/2026/05/25/valuable-news-2026-05-25/
> - https://vermaden.wordpress.com/2026/06/15/valuable-news-2026-06-15/
>
> My 'vernews' alias is for checking if something already been posted or not
> :)
>
> Hope that helps.
>
> Regards,
> vermaden
>


-- 
Mario.