Should we set boot.isContainer to true?

[ljxfstorm]

A user distro in WSL2 is effectively a container managed by the WSL init program. There is an underlying CBL-Mariner system distro running in the root namespace. hostnamectl also identifies the Chassis attribute as container.
Given this, should we set boot.isContainer to true? What are the pros and cons of doing so?

Ref: #956 #957

---

I found #145 and #149 about this, but the underlying reason remains unclear to me.

---

The output of ps afx in the WSL debug shell provides a reference for what is running in the root namespace:

    PID TTY      STAT   TIME COMMAND
      2 ?        S      0:00 [kthreadd]
      ...
      1 ?        Ssl    0:54 /init
    230 ?        S      0:00 /init
 352725 hvc2     Ss     0:00  \_ /bin/login -f
 358283 hvc2     S      0:00      \_ -bash
 358715 hvc2     R+     0:00          \_ ps afx
    238 ?        S      0:25 /sbin/chronyd
    244 ?        Sl     0:17 gns --socket 8 --dns_socket 9 --dns_tunneling_ip 10.255.255.254
    287 ?        Sl     0:08 localhost --port-tracker-fd 8 --bpf-fd 10 --netlink-fd 9 --localhost-relay -1
    290 ?        S      0:25 telagent
    291 ?        Sl     0:00 /init
    297 ?        Ss     0:02  \_ /sbin/init --log-target=kmsg
    298 ?        Sl     0:00  |   \_ /init
    308 ?        Sl     0:00  |   |   \_ plan9 --control-socket 7 --log-level 4 --server-fd 8 --pipe-fd 10 --log-truncate
    727 ?        Ss     0:00  |   |   \_ /init
    728 ?        S      0:05  |   |   |   \_ /init
    729 ?        Ss     0:00  |   |   |       \_ -zsh
    788 ?        S+     0:00  |   |   |           \_ tmux attach
    731 ?        Ss     0:00  |   |   \_ /bin/login -f
    743 ?        S+     0:00  |   |       \_ -zsh
    466 ?        Ss     0:02  |   \_ /nix/store/yxk9smkrispxlz2ka3gxigvmzhf0fn65-systemd-258.2/lib/systemd/systemd-journald
    477 ?        Ss     0:01  |   \_ /nix/store/yxk9smkrispxlz2ka3gxigvmzhf0fn65-systemd-258.2/lib/systemd/systemd-udevd
    618 ?        Ssl    0:16  |   \_ /nix/store/vhqq7zz8vgzpq0gncqsnmghkdkf3p38k-nsncd-1.5.2/bin/nsncd
    631 ?        Ss     0:00  |   \_ /nix/store/yxk9smkrispxlz2ka3gxigvmzhf0fn65-systemd-258.2/lib/systemd/systemd-logind
    640 ?        Ss     0:00  |   \_ /nix/store/rrxyf4148vxygipqczyncaw07wjwv14i-dbus-broker-37/bin/dbus-broker-launch --scope system --audit
    655 ?        S      0:00  |   |   \_ dbus-broker --log 10 --controller 9 --machine-id 94b4f713ec414095aa35305cc5f85f63 --max-bytes 536870912 --max-fds 4096 --max-matches 16384 --audit
    667 ?        Ss     0:00  |   \_ /nix/store/yxk9smkrispxlz2ka3gxigvmzhf0fn65-systemd-258.2/lib/systemd/systemd --user
    671 ?        S      0:00  |   |   \_ (sd-pam)
    778 ?        Ss     0:00  |   |   \_ /nix/store/rrxyf4148vxygipqczyncaw07wjwv14i-dbus-broker-37/bin/dbus-broker-launch --scope user
    789 ?        S      0:00  |   |   |   \_ dbus-broker --log 11 --controller 10 --machine-id 94b4f713ec414095aa35305cc5f85f63 --max-bytes 100000000000000 --max-fds 25000000000000 --max-matches 5000000000
  50644 ?        SLsl   0:03  |   |   \_ /nix/store/1qm4jcrxgka13lq8d70q0xia75n8xwdw-gnupg-2.4.8/bin/gpg-agent --supervised
  50730 ?        SLl    0:00  |   |       \_ scdaemon --multi-server
    772 ?        Ss     1:20  |   \_ tmux attach
    773 ?        Ss     0:05  |   |   \_ -zsh
 356018 ?        Ss+    0:00  |   |   \_ -zsh
 160230 ?        Ssl    0:00  |   \_ nix-daemon --daemon
    303 ?        S      0:00  \_ /usr/bin/WSLGd
    307 ?        Sl     0:02  |   \_ /usr/bin/weston --backend=rdp-backend.so --modules=wslgd-notify.so --xwayland --socket=wayland-0 --shell=rdprail-shell.so --log=/mnt/wslg/weston.log --logger-scopes=log,rdp-backend,rdprail-shell
    336 ?        Ssl    0:00  |   |   \_ /usr/bin/Xwayland :0 -rootless -core -listen 34 -wm 35 -terminate -nolisten local -ac
    327 ?        S      0:00  |   \_ /usr/bin/dbus-daemon --syslog --nofork --nopidfile --system
    328 ?        Sl     0:00  |   \_ /usr/bin/pulseaudio --log-time=true --disallow-exit=true --exit-idle-time=-1 --load=module-rdp-sink sink_name=RDPSink --load=module-rdp-source source_name=RDPSource --load=module-native-protocol-unix socket=/mnt/wslg/PulseServer auth-anonymous=true --log-target=newfile:/mnt/wslg/pulseaudio.log
 333598 ?        S      0:00  |   \_ /init /mnt/c/Program Files/WSL/msrdc.exe msrdc.exe /wslg /silent /v:0487ECA7-D85F-47E8-B740-3FC1C95F45CD /hvsocketserviceid:00000001-FACB-11E6-BD58-64006A7986D3 /plugin:WSLDVC_PACKAGE /wslgsharedmemorypath:WSL\0487ECA7-D85F-47E8-B740-3FC1C95F45CD\wslg C:\Program Files\WSL\wslg.rdp
    332 ?        Ss     0:00  \_ /usr/bin/dbus-daemon --syslog --fork --print-pid 6 --print-address 8 --session

[SuperSandro2000]

The reason is explained here #145 (comment)

Some assumptions about containers from NixOS side do not hold true for WSL. Like we need pam unlike for systemd-nspawn or we can load kernel modules or set sysctl values or change the rtc or create tun tap devices.

So we are not going to set it again as it breaks things that are working in WSL.