apple / apple/container

[Request]: Trigger local network privacy alert when runtime helper starts.

Open
#370 2 comments 3 reactions 1 assignee Claimed by @jglogan View on GitHub
network
Dominant language
Swift
Stars
49.9k
Forks
1.8k
Avg merge
1d 20h
Merged PRs (30d)
22

Description

### Feature or enhancement request details

With port forwarding added for containers (#97), we're running traffic from host applications to containers through the loopback interface. For this to work, the user must approve local network access for `container-runtime-linux`. The approval is a one-time procedure for a given executable (it may be necessary to repeat the procedure after an upgrade).

At present, the alert appears, I believe, which traffic is sent to the proxy. This can lead to usability issues the first time because the client may fail anytime between the presentation of the alert and the user's approval.

The Apple technical note for local network privacy includes sample code for [preemptively triggering the alert](https://developer.apple.com/documentation/technotes/tn3179-understanding-local-network-privacy#Trigger-the-local-network-alert). `container-runtime-linux` should trigger the alert during container startup, so that the container networking is functional before the user offers traffic to the proxy.

### Code of Conduct

- [x] I agree to follow this project's Code of Conduct

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.