Hacker News

points by rvz 1 day ago | 0 comments

There are yet thousands of these so-called "sandbox" projects that exists. This one sounds rather really wasteful on resources?

Bubblewrap would just be a better alternative for this.

[–] jFriedensreich 1 day ago

bubblewrap is linux only and offers a fraction of isolation of a microvm

[–] aniceperson 1 day ago

right chain of tought, but systemd is the only to truly leverage linux namespaces capabilities, allowing private networks, other rootfs, etc

[–] yjftsjthsd-h 1 day ago

systemd is not the only thing using linux namespaces. For example, the suggested bubblewrap uses namespaces to allow isolated networks (--unshare-net) and changing rootfs (--bind /mnt/foo /)

[–] kakugawa 1 day ago

bwrap has a lot of sharp edges that can bite you, if you're not aware of them.