Sure, someone helped me setting up a script to share the wl socket between namespaces so I can run GUI programs in isolated namespaces, and if you look at this post you can check the namespaced-openvpn; also check vole’s answer if you want to run GUI programs

Thank you for summarizing it up

I’ve been using network namespaces in Linux where each one also use a different user; this way you can have multiple profiles of apps separated not only by permissions but also by the VPN connection that is the only route out

So you can have a connection that will supply your favorite iso sharer, a VPN connection to work, all unaware of each ot

I still haven’t figured how to make GUI media applications work on them though

Arch is having internal discussions to increase it. Might be something upstream may adopt if all major distributions end up increasing it.

Also known as (close) to max signed int32