The daemon could fork a privileged helper early on and then drop privileges. The unprivileged main process (API server watch,
state machine) would communicate with the helper via a Unix socket. Only the helper would execute nsenter operations and only knows how to execute specific commands.
Issue originally reported by @jlebon in the https://github.com/bootc-dev/bootc-operator/blob/main/docs/ARCHITECTURE.md
The daemon could fork a privileged helper early on and then drop privileges. The unprivileged main process (API server watch,
state machine) would communicate with the helper via a Unix socket. Only the helper would execute nsenter operations and only knows how to execute specific commands.
Issue originally reported by @jlebon in the https://github.com/bootc-dev/bootc-operator/blob/main/docs/ARCHITECTURE.md