Will Orr

Channel programs seem like a good way to go, since libzfs_core support them, however I was hoping to at least limit the ioctls I was using on /dev/zfs with capsicum...however...allowing the channel program syscall is basically like a catch-all for doing anything so, whatever I guess ​

Specifically, what I was trying to do involved (among other things that didn't cause problems) (un)mounting zfs datasets and listing zfs datasets. libzfs_core does not support either, and at least on FreeBSD, libzfs seems like it's supposed to be an internal-only library, since some of the headers included in libzfs.h aren't installed. It seems like the options for doing this are shelling out (ew) or maybe I can do something with zfs channel programs? Who knows. Definitely a frustrating situation.

@erlend@writing.exchange @fediversenews I'm keeping my expectations tempered atm, since Gitlab isn't implementing this, an external contributor is. That's still good, but as always with an external contributor contributing code to corp open source, there's the risk that company priorities aren't aligned, or shift such that the contribution is no longer welcomed.