Hacker News Reader

> You can even render the default network namespace barren such that any accidentally launched software has no network of any kind.

This sounds extremely appealing. Do you have any quick-start resources for this, or do we just have to read the complete documentation for Linux namespaces?

View on HN

It's just a few commands using the ip tool. You can read about it here: https://www.wireguard.com/netns/

Wireguard is special in that after creating a wg0 interface you can move it to another namespace and its [encrypted] packets would be teleported into the namespace it started in. The link above has the wg0 being moved into the default/init namespace but you can move it anywhere.

Reply on news.ycombinator.com