Magicwrap

This is a module-based namespace wrapper slightly inspired by magisk. It is completely written in bash and does not require root access.

Note: Magicwrap is still in early development. An installer for module files (.zip, .tar, ...) is in paused progress.

How to run?

Install bubblewrap, bash, busybox-static and optionally fakeroot if you want to use the fakeroot module.
Run ./main.sh start

Usage

[mwdebug=true] [mwcinit=/path/to/init.sh] [mwcconf=/path/to/config.sh] ./main.sh <command>

Default settings

By default, Magicwrap is optimized to run simple terminal applications. Disable or enable modules in modules/{config,init}.sh to make Magicwrap fit your needs. Always enable/disable modules in both init.sh and config.sh!!!

Module sets

Another way to fit magicwrap to your needs is to apply a module set by running: ./main.sh modset <modset>

Every module restricts access to /etc and /var

simple: Allows access to most directorys
complete: Restricts access to /home and /opt
graphical: Allows access to users home directory and some directorys to run graphical applications properly
graphical-adv: Same as graphical but restricts access to /home and /opt and enables controller

Module overview

base: Creates base filesystem and init
advdirs: Mounts more directorys (/opt, /srv)
jailedcfg: Mounts stock debian configuration directorys (/etc, /var)
sharedfs: Mounts directorys that are shared between namespaces (/home, /opt)
graphical: Mounts some files that are required to run graphical applications properly
fakeroot: Replaces sudo with fakeroot
control: Allows application to do advanced operations (umount, external xdg-open)
pidone: Runs application as PID 1; not recommended

Module management

The module management scripts are inside scripts/modulemgr/ but they are not recommended yet as most modules will throw errors.

1.9 KiB Raw Permalink Blame History