You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I'm running in a Docker container, which does not (cannot) have ip installed.
user@test-workspace-88b1c24e:/workspace/test-workspace$ sudo ~user/.cargo/bin/httpjail --js "r.host === 'github.com'" -- hello
21:58:40.666 ERROR httpjail::sys_resource: Failed to cleanup resource on drop: Failed to execute ip netns del
Error: Failed to execute ip netns add
Caused by:
No such file or directory (os error 2)
I don't think this can ever work within a Docker container.
Hi, yes the strong jail hasn't been tested inside the Docker container. I might be able to get it to work, but it's expectation of low-level system access make support long-term burdensome. Could you share more details about your use case? Specifically, why run httpjail inside the container vs. outside with httpjail --docker-run?
We're currently using sysbox-runc so we're able to use iptables. We have a sandbox with HTTP/S proxy. We wish to limit max request to specific endpoints, e.g. POST https://github.com/api/v3/*pull* 0 to allow max zero requests (i.e. block creation of PRs)>
Activity
ammario commentedon Sep 30, 2025
Hi, yes the strong jail hasn't been tested inside the Docker container. I might be able to get it to work, but it's expectation of low-level system access make support long-term burdensome. Could you share more details about your use case? Specifically, why run
httpjailinside the container vs. outside withhttpjail --docker-run?alexec commentedon Oct 4, 2025
We're currently using
sysbox-runcso we're able to useiptables. We have a sandbox with HTTP/S proxy. We wish to limit max request to specific endpoints, e.g.POST https://github.com/api/v3/*pull* 0to allow max zero requests (i.e. block creation of PRs)>fix: Remove dependency on `ip` command for container support