Nested Vopono?

[NGC3034]

What would be the best way to do something like this:

vopono exec \
"vopono exec "ping 8.8.8.8" --custom "wg0-2.conf" --protocol wireguard" \
--custom "wg0-1.conf" --protocol wireguard

[jamesmcm]

At the moment vopono expects a physical network interface e.g. eth0 etc. for the bridge from the network namespace to connect to, so this isn't possible.

It might be possible by creating a tap device for each network namespace and bridging between those. But it's a lot of extra complexity (it'd mean a lot more, different firewall rules too). If you really need something like this I'd recommend looking at Qubes OS or a docker-compose set up that can do it.