Fargate is most problematic environment for now:
- najsil doesn't work because we can't grant NET_ADMIN perms
- landjail may not work, because older kernel is used in Fargate, and we don't have control on it
Good news is clone syscall is allowed, so it's still possible to try to make nsjail work in this ENV by using sockets (see SRT arch.) instead IPTables rules.
Fargate is most problematic environment for now:
Good news is clone syscall is allowed, so it's still possible to try to make nsjail work in this ENV by using sockets (see SRT arch.) instead IPTables rules.