netns

func Do ¶ added in v0.3.2

func Do(pid int, fn func() error) error

Do executes fn in the network namespace of the process pid without switching the calling goroutine's network namespace.

Sockets that fn creates belong to the target network namespace for their whole lifetime, even when they are later used from threads in the original namespace.

Do requires CAP_SYS_ADMIN in the caller's user namespace and in the user namespace that owns the target network namespace (setns(2)).

To use this function the main thread of the process must be locked to the main goroutine (LockOSThread called from init()).