<!DOCTYPE html><html><head><title></title><style type="text/css">p.MsoNormal,p.MsoNoSpacing{margin:0} p.MsoNormal,p.MsoNoSpacing{margin:0}</style></head><body><div>I am curious about the possibility of creating a FUSE mount inside my flatpak app (specifically, running "rclone mount").<br></div><div><br></div><div>I don't *think* it's possible to do this, but just wanted to confirm my understanding before moving on to other strategies.<br></div><div><br></div><div>Things needed for this to work (at least):<br></div><div>- Access to /dev/fuse: possible with --device=all<br></div><div>- Kernel permission to call mount(): normally done with a suid fusermount program, which is not allowed inside a flatpak<br></div><div><br></div><div>My brief understanding is that nowadays there is kernel support for using FUSE with user namespaces, with an eye to letting FUSE work inside unprivileged containers. So _maybe_ it's possible to not need a suid fusermount, but I'm not super familiar with these subsystems. I tried throwing a non-suid fusermount into my flatpak, and I do unsurprisingly get "operation not permitted" errors when it calls mount().<br></div><div><br></div><div>Is there a way to make this work? Thanks in advance for any answers.<br></div></body></html>