forkoff

Experiment that uses kafel to set seccomp filters to prevent forking Really bad prototype using neon + rust to build bindings.

Currently an EPERM error will be raised when you try to run a process.

Hacking

Install submodules:

git submodule update --init --recursive

Install Rust

curl https://sh.rustup.rs -sSf | sh

Install Neon

npm install -g neon-cli

Ensure libkafel is built and accessible

• build.rs will look for the file in the root directory
• node expects libkafel.so.1 to exist so you need to symlink or rename

cd vendor/kafel
make
cp libkafel.so ../../
cp libkafel.so ../../../libkafel.so.1

Run the build

neon build 

Run the demo

npm start