RPM-PLUGIN-UNSHARE(8)

💅 rpm-plugin-unshare(8) — the unshare plugin for the RPM Package Manager

okay so bestie, this is a page from the System Manager's Manual, and it's genuinely one of the coolest little gremlins in the RPM ecosystem. buckle up 🎀

---

✨ NAME ✨

rpm-plugin-unshare — the Unshare plugin for the RPM Package Manager 🦋

---

🌸 DESCRIPTION 🌸

so basically this plugin lets you use all the Linux-specific namespace-related technologies inside transactions. why would you want that? to harden and limit scriptlet access to resources, that's why. it's giving bouncer-at-the-club energy for your scriptlets 💅

---

🎀 CONFIGURATION 🎀

this plugin implements the following configurables, and yes you have to spell them exactly like this, no cap:

• %__transaction_unshare_paths — a colon-separated list of paths to privately mount during scriptlet execution. the typical iconic examples are /tmp, to protect against insecure temporary file usage inside scriptlets, and /home, to prevent scriptlets from accessing user home directories. when path unsharing is enabled, any mounts made from scriptlets are also private to the scriptlet — and vice versa, mount changes on the host are not visible to the scriptlet. it's a two-way boundary, not me making that up, fr fr.

private mounts in chroot-operations is unimplemented. so like, don't @ me about it, it's just not a thing yet 😭

• %__transaction_unshare_nonet — a non-zero value disables network access during scriptlet execution. bye bye network, no signal, blocked, ghosted 💀

see rpm-plugins(8) on how to control plugins in general — that's the group chat where all the plugin logistics live 🫶

---

👑 SEE ALSO 👑

• dbus-monitor(1)
• rpm-plugins(8)

---

that's the whole vibe, bestie. this page is from RPM 6.0.2, dated 2026-07-16, and it ate. periodt ✨🌈💖