Live data from Hacker News

Show HN: boxxy – Control where Linux programs put files, without symlinks

github.com

11–20 of 250 posts

Re: Show HN: boxxy – Control where Linux programs put files, without symlinks

#11
post #7
post #5

Earlier quoted context omitted.

No! I just thought it was a cute name ("put things in a box"), and it wasn't a common repo name on GitHub.

You might be surprised how many of us were obsessed with Boxxy lol.

YUP, she was the OG camgirl, sadly got all the worst parts of the gross attention / fame without any of the perks/money that Belle Delphine gets now

Re: Show HN: boxxy – Control where Linux programs put files, without symlinks

#12
post #7
post #5

Earlier quoted context omitted.

No! I just thought it was a cute name ("put things in a box"), and it wasn't a common repo name on GitHub.

You might be surprised how many of us were obsessed with Boxxy lol.

I remember it quite well! Just not my particular cup of tea.

Re: Show HN: boxxy – Control where Linux programs put files, without symlinks

#15
post #9
post #8

AWS an interesting example considering it's also a default search path for the SDK so anything using an AWS SDK is going to check for ~/.aws/config; does boxxy apply the rules to anything run in a shell, or only if 'run by boxxy'?

Only in the latter case; I didn't want to assume how people want things done, and implicitly magical tools break more often than not in my experience. You may also be able to tell I don't have a lot of AWS experience (:

Would be cool if there was a tool that could detect that configured path was attempted to be opened, and redirect the open() syscall to the real path... But that would most likely require kernel support.

Boxxy seems good enough for userspace.

Re: Show HN: boxxy – Control where Linux programs put files, without symlinks

#17
post #9

Earlier quoted context omitted.

Only in the latter case; I didn't want to assume how people want things done, and implicitly magical tools break more often than not in my experience. You may also be able to tell I don't have a lot of AWS experience (:

Would be cool if there was a tool that could detect that configured path was attempted to be opened, and redirect the open() syscall to the real path... But that would most likely require kernel support. Boxxy seems good enough for userspace.

I actually attempted using ptrace to rewrite syscalls first! It was... horribly painful, and didn't work anywhere near as well as the bind-mount version.

Re: Show HN: boxxy – Control where Linux programs put files, without symlinks

#20

Does this use namespaces or chroot? The readme mentions namespaces (like Flatpak?), but https://github.com/queer/boxxy/blob/mistress/src/enclosure/m... seems to indicate it uses chroot.

It creates a new mount namespace, and bind-mounts your ENTIRE filesystem into it, before chrooting, so that it can optionally remount / as ro to prevent applications from writing outside of the desired directories. The namespace is to allow doing the bind mounts in the first place.
Post reply on HN