Crates.io | fcnetd |
lib.rs | fcnetd |
version | |
source | src |
created_at | 2024-10-27 18:09:06.022923+00 |
updated_at | 2025-03-23 13:56:04.962909+00 |
description | A daemon process that receives rootless connections from fcnetd-client to perform rootful Firecracker microVM networking. |
homepage | |
repository | https://github.com/rust-firecracker/fcnet |
max_upload_size | |
id | 1424864 |
Cargo.toml error: | TOML parse error at line 17, column 1 | 17 | autolib = false | ^^^^^^^ unknown field `autolib`, expected one of `name`, `version`, `edition`, `authors`, `description`, `readme`, `license`, `repository`, `homepage`, `documentation`, `build`, `resolver`, `links`, `default-run`, `default_dash_run`, `rust-version`, `rust_dash_version`, `rust_version`, `license-file`, `license_dash_file`, `license_file`, `licenseFile`, `license_capital_file`, `forced-target`, `forced_dash_target`, `autobins`, `autotests`, `autoexamples`, `autobenches`, `publish`, `metadata`, `keywords`, `categories`, `exclude`, `include` |
size | 0 |
fcnetd
is a binary daemon that runs as root and receives I/O connections by listening asynchronously on a Unix socket with Tokio.
While fcnetd
runs as root, the socket is chown()
-ed to a rootless user so that a rootless application process can connect to
fcnetd
, thus proxying its networking needs into a separate process without running the whole application as root
.
Examples:
fcnetd /tmp/fcnetd.sock
- listen on /tmp/fcnetd.sock
and make available only to root
.fcnetd --uid 1000 --gid 100 /tmp/fcnetd.sock
- listen on /tmp/fcnetd.sock
and make available to UID 1000 and GID 100.fcnetd --password abcde --uid 1000 /tmp/fcnetd.sock
- listen on /tmp/fcnetd.sock
accessible by UID 1000, additionally authenticate connections with the abcde
password.