The 19th is looking for a full-stack engineer! It's a lovely team doing important work. If you're looking for a mission-driven, US-based full-stack role, this is the one. https://19thnews.org/full-stack-engineer-employee-hire/
EDIT: NOT removing this post as it is still informative. As @oleksandr (thanks) pointed out it has Russian binding. So probably going back to the drawing board and finding something else for Chrome.
My original post:
“During the post “uBlock Origin era”, I’ve came into conclusion that overall AdGuard fits the bill best:
@lkundrak @vegard getting rid of /dev was at least dead easy:
+# Debootstrap populates `/dev/{null,zero,full,random,urandom,tty}`, meaning that
+# mounting devtmpfs to `/dev` is not required.
sudo unshare \
--mount \
--uts \
--root "$ROOTFS" \
sh -c "
- mkdir -p /proc
- mkdir -p /sys
- mkdir -p /dev
- mount -t sysfs /sys /sys
mount -t proc /proc /proc
- mount -t devtmpfs /dev /dev
mount -t devpts /dev /dev/pts
hostname $MACHINE
# ...
I think I can iterate from this :-) E.g, proc-mount can be probably (I’d guess) made unprivileged with “–fork –pid” i.e., creating PID namespace.