The problem with stacking chrootenv before was that CLONE_NEWUSER cannot be used when a child uses chroot. So instead of that we use pivot_root which replaces root in the whole namespace. This requires our new root to be an actual fs so we mount tmpfs. |
||
---|---|---|
.. | ||
chrootenv | ||
default.nix | ||
env.nix |