Linux namespaces isolate certain functionality for a group of processes. See more here: <a href="http:&#x2F;&#x2F;man7.org&#x2F;linux&#x2F;man-pages&#x2F;man7&#x2F;namespaces.7.html" rel="nofollow">http:&#x2F;&#x2F;man7.org&#x2F;linux&#x2F;man-pages&#x2F;man7&#x2F;namespaces.7.html</a><p>And yes, a blank new network namespace won&#x27;t even have the loopback interface available. There is a program named unshare, which executes a program in another namespace.