Error: Failed to execute ip netns add

[alexec]

I'm running in a Docker container, which does not (cannot) have ip installed.

user@test-workspace-88b1c24e:/workspace/test-workspace$ sudo ~user/.cargo/bin/httpjail --js "r.host === 'github.com'" -- hello
21:58:40.666 ERROR httpjail::sys_resource: Failed to cleanup resource on drop: Failed to execute ip netns del
Error: Failed to execute ip netns add

Caused by:
    No such file or directory (os error 2)

I don't think this can ever work within a Docker container.

[ammario]

Hi, yes the strong jail hasn't been tested inside the Docker container. I might be able to get it to work, but it's expectation of low-level system access make support long-term burdensome. Could you share more details about your use case? Specifically, why run httpjail inside the container vs. outside with httpjail --docker-run?

[alexec]

We're currently using sysbox-runc so we're able to use iptables. We have a sandbox with HTTP/S proxy. We wish to limit max request to specific endpoints, e.g. POST http://github.com/api/v3/*pull* 0 to allow max zero requests (i.e. block creation of PRs)>