How to properly execute commands within an extension container?

[jsenecal]

I'm working with a custom Talos system extension (FRR) and need to execute commands inside the extension container for debugging and troubleshooting purposes.

I've tried the typical approach of spawning a debug container and using nsenter to enter the namespace, but this doesn't seem to work for accessing the extension container's environment.

I'm basically looking to execute commands like vtysh (FRR shell) inside the running extension container

What I've tried:

• Spawning a debug pod with --profile=sysadmin and using nsenter to enter the container's extension namespace
• This approach doesn't properly access the extension container environment

Questions:

1. What's the proper way to execute commands within a Talos system extension container?
2. Are there specific tools or approaches recommended for debugging extension containers?
3. Is there a way to get an interactive shell inside the extension container?

Any guidance on the correct approach would be greatly appreciated!

[smira]

We do not support anything specific for it, and it depends on case by case basis.

nsenter should work, and there is no reason it shouldn't work.

Extension services are more or less regular containers with their rootfs on the filesystem itself (no image involved).

[frezbo]

find pid of the extension container process and try nsenter --mount=/proc/<pid>/ns/mnt -- <command> the container should have pid namespacher shared

[jsenecal]

Ok, so I guess I'm doing it wrong, let me fight with it some more

[jsenecal]

thanks @frezbo that did it