Without knowing the details, I think it should be possible to route all the network/internet traffic trough a container installed and running in Silverblue. That would allow installing the endpoint protection inside the given container. This is certainly a more elaborate setup, there are online resources out there though.
For what it’s worth, when this topic was opened, out of curiosity I was able to run this application in a privileged container. Since I don’t have a (I think required) Microsoft account, I haven’t tested its functionality further.
It seems I haven’t saved the Containerfile since then, but from memory the application was successfully started and running.
1 Like
It’d be interesting to know if the container could act as a gateway for the host, with network traffic from the host routed through it, and if so, whether the endpoint protection or antivirus would perform as expected for traffic from host (e.g. for an email client ran on the host system).
There is a way to run as container well on my theory since i have explored solution for VPN from container and it is possible and just creating local proxy setup to container and container goes to out so all is still working and protected as VPN does.
This might be possible solution for this too if layering is not option, but it has been long time i last time did this research and experiment and gave up since layering was so much easier way than creating docker and route all and make proxy etc
Here is lots of details on proxy and docker setup for vpn, but can be usefull
1 Like