Port forwarding for Guix containers

[Zhu Zihao]

Hi, Guix users!


I found guix container "created by `guix environment --container` or `guix 
system container`" is very useful to isolate some service. But it only supports 
fully isolated network namespace or just share with host, it's not so safe IMO.



In Docker, there's port forwarding, allows you to share some ports of Guix 
container with host. I just learn something about docker's network mechanism, 
it looks quite complicated. It use veth pair, network bridge and even iptables. 
Is there some idiomatic way to implement such port forwarding feature for Guix 
containers?


Any answer or suggestions are appreicated.


--


Zihao