Data mounts and port forwarding

[raulbe]

I was just exploring data mounts and some thing like this

unshare -m -- /bin/sh -c "mount -o bind,noexec,nosuid,nodev /var/bocker/shared '$btrfs_path/$uuid'/var/www/data"

seems to work well enough for basic host to container mounts.

Apart from iptables, socat is also a excellent option for port forwarding with a simple one liner;

socat TCP-LISTEN:80,fork TCP:10.0.0.2:80

[Fusion]

However, socat is a user space binary. iptables allow for kernel tcp rewriting, which in the long run is what containers need (like brawndo!)