Hacker News Reader

Bind mounts can work fine. Setting them up does require root though. Easiest would be if the harness offered to enable containment. Awkwardly, it would require root.

View on HN

In fact, it's possible to set up bind mounts without root on a modern Linux system, using a user namespace and a mount namespace.

podman is my favorite tool for this.

You also need setuid, that's were I hit the root requirement, the bind mount itself can indeed be created.

Reply on news.ycombinator.com