musehub-unprivileged.sh

#!/bin/bash

trap "exit" INT TERM
trap "kill 0" EXIT

unshare -U bash -c 'kill -STOP $$; exec /opt/muse-hub/Muse.Service' &
pid=$!
while ! ( grep '^State:' /proc/$pid/status | grep -q $'\tT ' ); do
  sleep 0.1s
done
echo "0 $UID 1" > /proc/$pid/uid_map
kill -CONT $pid
wait