Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/Friz-zy/pyspaces
Works with Linux namespaces througth glibc with pure python
https://github.com/Friz-zy/pyspaces
containers glibc linux-namespaces python
Last synced: 2 months ago
JSON representation
Works with Linux namespaces througth glibc with pure python
- Host: GitHub
- URL: https://github.com/Friz-zy/pyspaces
- Owner: Friz-zy
- License: other
- Archived: true
- Created: 2015-04-12T08:59:23.000Z (about 9 years ago)
- Default Branch: master
- Last Pushed: 2018-03-05T17:21:40.000Z (over 6 years ago)
- Last Synced: 2024-03-30T01:22:59.421Z (3 months ago)
- Topics: containers, glibc, linux-namespaces, python
- Language: Python
- Size: 85.9 KB
- Stars: 87
- Watchers: 7
- Forks: 12
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE
- Security: security.md
Lists
- awesome-linux-containers - pyspaces
- awesome-linux-containers - pyspaces
README
# pyspaces
Works with Linux namespaces through glibc with pure python
[](https://pypi.python.org/pypi/pyspaces/)
[](https://pypi.python.org/pypi/pyspaces/)
[](https://pypi.python.org/pypi/pyspaces/)
[](https://pyspaces.readthedocs.org/en/latest/)
discuss: [reddit](https://www.reddit.com/r/Python/comments/33z84l/linux_namespaces_througth_glibc_with_pure_python/), [habrahabr](http://habrahabr.ru/company/wargaming/blog/256647/)
## Goals
There is so many beautiful tools like [docker](https://github.com/docker/docker), [rocket](https://github.com/coreos/rkt) and [vagga](https://github.com/tailhook/vagga) written in go and rust, but none in python.
I think that is because there is no easy way to work with linux namespaces in python:
* you can use [asylum](https://pypi.python.org/pypi/asylum/0.4.1) - a project that looks dead and with a codebase hosted not on mainstream hub like github
* or you can use the [python-libvirt](https://pypi.python.org/pypi/libvirt-python/1.2.13) bindings with a big layer of abstraction
* or just use the native glibc library with ctypes
* otherwise subprocess.Popen -- your choice
I want to change this: I want to create native python bindings to glibc with interface of python multiprocessing.Process.
PS: you can look at [python-nsenter](https://github.com/zalando/python-nsenter) too, it's looks awesome.
PPS: new project from author of asylum - [butter](https://pypi.python.org/pypi/butter/0.10)
## Example
First simple example:
```python
import os
from pyspaces import Container
def execute(argv):
os.execvp(argv[0], argv)
cmd = "mount -t proc proc /proc; ps ax"
c = Container(target=execute, args=(('bash', '-c', cmd),),
uid_map='0 1000 1',
newpid=True, newuser=True, newns=True
)
c.start()
print("PID of child created by clone() is %ld\n" % c.pid)
c.join()
print("Child returned: pid %s, status %s" % (c.pid, c.exitcode))
```
output:
```bash
PID of child created by clone() is 15978
PID TTY STAT TIME COMMAND
1 pts/19 S+ 0:00 bash -c mount -t proc proc /proc; ps ax
3 pts/19 R+ 0:00 ps ax
Child returned: pid 15978, status 0
```
## CLI
```bash
space execute -v --pid --mnt --user --uid 1000 --gid 1000 bash -c 'mount -t proc /proc; ps ax'
```
```bash
space chroot --pid --uid '0 1000 1' ~/.local/share/lxc/ubuntu/rootfs/ /bin/ls /home/
```
```bash
space inject --net --mnt 19840 bash
```
Note: If the program you're trying to exec is dynamically linked, and the dynamic linker is not present in /lib in the chroot environment - you will get the following error: "OSError: [Errno 2] No such file or directory". You need all the other files the dynamic-linked program depends on, including shared libraries and any essential configuration/tables/etc in the new root directories. [src](http://www.ciiycode.com/0JiJzPgggqPg/why-doesnt-exec-work-after-chroot)
## Security
Read [this article](https://github.com/Friz-zy/awesome-linux-containers#security) please
## Changelog
[on github](https://github.com/Friz-zy/pyspaces/blob/master/CHANGELOG.md)
[digest](https://allmychanges.com/p/python/pyspaces/)
## TODO
- [x] namespaces: clone & Container
- [x] CLI
- [x] Chroot
- [x] setns & inject
- [ ] cgroups
- [ ] SCM: apparmor & selinux
- [ ] capabilities
- [ ] mount
- [ ] network
- [ ] move CLI to separate package
- [ ] addons
- [ ] container list
- [ ] support for lxc, vagga, rocket, docker, etc...
- [ ] ...
- [ ] one tool for rule them all!!1