Named namespaces

[planetA]

Hello,

is there a way to create a named network namespace? I mean the one that I can see in ip netns.

[ghost]

We do this manually right now, here's the code:

        if err := syscall.Unshare(syscall.CLONE_NEWNET); err != nil {
                return err
        }
        p := path.Join("/var/run/netns/", netname)
        f, err := os.OpenFile(p, os.O_CREATE | os.O_EXCL, 0444)
        if err != nil {
                return err
        }
        f.Close()
        if err := syscall.Mount("/proc/self/ns/net", p, "bind", syscall.MS_BIND, ""); err != nil {
                return err
        }

Should probably clean this up and submit a PR; maintainers, would you be interested in this?

[planetA]

"self/ns/net" may refer to another thread. You should access namespace bound to your task id. I'll send full example later

…

On Sun, 5 Aug 2018, 13:44 Alexander Schittler ***@***.***> wrote: We do this manually right now, here's the code: if err := syscall.Unshare(syscall.CLONE_NEWNET); err != nil { panic(err) } p := path.Join("/var/run/netns/", netname) f, err := os.OpenFile(p, os.O_CREATE | os.O_EXCL, 0444) if err != nil { panic(err) } f.Close() if err := syscall.Mount(fmt.Sprintf("/proc/self/ns/net"), p, "bind", syscall.MS_BIND, ""); err != nil { panic(err) } Should probably clean this up and submit a PR; maintainers, would you be interested in this? — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#26 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AHKZxs4z8je-uHlzAPy0rECB93DMybFcks5uNtqDgaJpZM4U-e_u> .

[planetA]

I create a named one like this:

newNsPath := "/var/run/netns"
nsPath := fmt.Sprintf("/proc/%d/task/%d/ns/net", os.Getpid(), syscall.Gettid())
err = syscall.Mount(nsPath, newNsPath, "", syscall.MS_BIND|syscall.MS_REC, "")

[ghost]

Ah, that's good to know, we spawned a new process to avoid this (also because it "burns" an OS thread available to the runtime)

[jeffwidman]

I think this can be closed as fixed?

• Allows to create and delete named network namespaces #42