alt Hacker NewsThe sandbox was already there, Rubydoc runs yard inside docker, the problem is that container still has network access
Replies
chrisjj • today at 4:40 PM
So, not a sandbox then.
The sandbox was already there, Rubydoc runs yard inside docker, the problem is that container still has network access
So, not a sandbox then.
Presumably the docker container has network access because something else in the build system requires it? I don't think sandboxing the entire build process is the right level of granularity here - one ideally wants to be able sandbox each package's build scripts individually.