Changes

# bind-mount the X unix socket into the chroot.

# bind-mount the X unix socket into the chroot.

# ssh ''into'' the chroot with X11-forwarding enabled.

# ssh ''into'' the chroot with X11-forwarding enabled.

# enable TCP on an X server, e.g. a nested Xephyr.

# Enable TCP on an X server, e.g. a nested Xephyr.

We're going to try option (3) first:

We're going to try option (3) first:

   Xephyr -ac :1

   Xephyr -ac :1   ''outside chroot''

::''NB: If you figure out how to make Xephyr bind only to localhost sockets (or how to make it use a custom xauth config), speak up!''

::''NB: If you figure out how to make Xephyr bind only to localhost sockets (or how to make it use a custom xauth config), speak up!''

    

    

and, inside the chroot:

And, ''inside'' the chroot:

   export DISPLAY=localhost:1

   export DISPLAY=localhost:1

For stupid reasons, it's necessary that Sugar run under a uid inside the chroot which exists as a real account outside the chroot. (Talk to the DBus people.)

For stupid reasons, it's necessary that Sugar run under a uid inside the chroot which exists as a real account outside the chroot. (Talk to the DBus people.)

Consequently, run something like this both inside and outside the chroot:

Consequently, run something like this ''both'' inside and outside the chroot:

   groupadd -g 64002 sugar

   groupadd -g 64002 sugar