Special FUSE filesystem to map /etc/resolv.conf to different files depending on Linux network namespace

Vitaly Shukela

Last update: May 16, 2022

Related tags

Data structures resolvconffs

Overview

resolvconffs

Linux network namespaces allow separate networking environment for a group of processes (sharing uid or from a separate user). DNS settings (/etc/resolv.conf) are however shared between all those environments, which may be inconvenient in some setups.

Typically (i.e. in ip netns tool) the mount (filesystem) namespace is used along with netns as a workaround, mapping distinct /etc/netns/... files to main /etc/resolv.conf. This tool provides different approach based on a FUSE filesystem which provides similar mapping without using additional mount namespace.

It works by inspecing PIDs of each programs that access the mounted /etc/resolv.conf and using /proc/ /ns/net to find out which underlying file should be used and forwarding reads and writes to that file instead. Missing files may be propagated from a user-specified template file.

Example

(untested)

# cp /etc/resolv.conf /etc/resolv.conf.bak
# mkdir /tmp/resolvconfs
# /opt/resolvconffs -d /etc/resolv.conf.bak /tmp/resolvconfs /etc/resolv.conf&

Installation

Download a pre-built x64_64 version from Github releases or try cargo install or download source code and use cargo build --release. Copy resulting executable where you want.

Integrating the tool with distro's networking stack is out of scope for this document.

Usage output

resolvconffs --help
Usage: /opt/resolvconffs [OPTIONS]

Special FUSE filesystem that maps its sole file to other files based on network namespace of process that queries the file.

Positional arguments:
  backing_directory          Directory where to look for resolv.conf-like files for each netns.
  mountpoint_file

Optional arguments:
  -h, --help
  -p, --extension EXTENSION  Filename extension. resolvconffs maps its file to 
   
    /
    
     
       (default: conf)
  -d, --default-file DEFAULT-FILE
                             In case of target file does not exist, copy this file to target instead of returning ENOENT.
  -P, --procfs PROCFS        Directory where to look up network namespace IDs based on PIDs. (default: /proc)
  -o, --fuse-opt OTHER-FUSE-OPTS

Library usage

The project is not libified and library usage is not intended.

There is a simple reusable component named FileMapperFs inside, allowing implementing similar single-file filesystems based on fuser crate that maps the file based on uid, gid or pid of accessing process.

You might also like...

Rust command line utility to quickly display useful secrets in a Kubernetes namespace

kube-secrets This is a command line utility for quickly looking at secrets in a Kubernetes namespace that are typically looked at by humans. It specif

8 Feb 10, 2022

the file filesystem: mount semi-structured data (like JSON) as a Unix filesystem

ffs: the file filesystem ffs, the file filessytem, let's you mount semi-structured data as a fileystem---a tree structure you already know how to work

176 Dec 31, 2022

Rust lib for a Vec-like structure that can store different types of different sizes contiguous with each other in memory.

hvec In memory of Anna Harren, who coined the term turbofish - which you'll see a lot of if you use this crate. The main purpose of this crate is the

2 Oct 23, 2022

This is a cross-platform tool to historicize different branches/depots/manifests and generating pseudocode for it to compare different game updates

CSHP This is a cross-platform tool to historicize different branches/depots/manifests and generating pseudocode for it to compare different game updat

6 Jan 28, 2022

Test cargo crates in different envs & via different methods

2 Mar 22, 2022

Supertag is a tag-based filesystem, written in Rust, for Linux and MacOS

Supertag is a tag-based filesystem, written in Rust, for Linux and MacOS. It provides a tag-based view of your files by removing the hierarchy constraints typically imposed on files and folders. In other words, it allows you to think about your files not as objects stored in folders, but as objects that can be filtered by folders.

539 Dec 24, 2022

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps. 👻🐚

This utility traverses through your filesystem looking for open-source dependencies that are seeking donations by parsing README.md and FUNDING.yml files

38 Dec 30, 2022

A filesystem driver that allows you to view your Blackboard course contents as if they were normal files and folders on your system!

BlackboardFS Blackboard: noun A website so bad that it might as well be a network drive. BlackboardFS is a filesystem driver that allows you to view y

22 Sep 4, 2023

Special FUSE filesystem to map /etc/resolv.conf to different files depending on Linux network namespace

Related tags

Overview

resolvconffs

Example

Installation

Usage output

Library usage

You might also like...

Rust command line utility to quickly display useful secrets in a Kubernetes namespace

the file filesystem: mount semi-structured data (like JSON) as a Unix filesystem

Rust lib for a Vec-like structure that can store different types of different sizes contiguous with each other in memory.

This is a cross-platform tool to historicize different branches/depots/manifests and generating pseudocode for it to compare different game updates

Test cargo crates in different envs & via different methods

Supertag is a tag-based filesystem, written in Rust, for Linux and MacOS

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps. 👻🐚

Rust library for filesystems in userspace (FUSE)

A utility that can download JavaScript and TypeScript module graphs and store them locally in a special zip file.

A special web app to render fancy UTF-8 sequences. :hindu_temple: :scroll:

A special rope, designed to work with any data type that is not String

SELYA (Special Esoteric Language for Young and Adult)

Microscopic fetch tool in Rust, for NixOS systems, with special emphasis on speed

Swap token protocol for cryptocurrencies, supported in cosmos network, such as UST, LUNA, LUNI, etc.

A lite tool to make systemd work in any container(Windows Subsystem for Linux 2, Docker, Podman, etc.)

A lite tool to make systemd work in any container(Windows Subsystem for Linux 2, Docker, Podman, etc.)

Prints the absolute path of all regular files in an unmounted btrfs filesystem image.

This utility traverses through your filesystem looking for open-source dependencies that are seeking donations by parsing README.md and FUNDING.yml files

A filesystem driver that allows you to view your Blackboard course contents as if they were normal files and folders on your system!

Releases(v0.1.0)

v0.1.0(Jan 30, 2022)

Owner

Vitaly Shukela

A simple Vec-based Map inspired on JavaScript for rust.

B-Tree map for pub/sub services

Serializable map of any type.

enum-map enum-map xfix/enum-map [enum-map] — An optimized map implementation for enums using an array to store values.

The reference implementation of the Linux FUSE (Filesystem in Userspace) interface

Fuse filesystem that returns symlinks to executables based on the PATH of the requesting process.

A small in-memory filesystem using FUSE.

API bindings, CLI client and FUSE filesystem for Wiki.js written in Rust.

FUSE filesystem that provides FizzBuzz.txt(8 Exabyte)

Self Organizing Map (SOM) is a type of Artificial Neural Network (ANN) that is trained using an unsupervised, competitive learning to produce a low dimensional, discretized representation (feature map) of higher dimensional data.