logoalt Hacker News

cyberclimb • yesterday at 4:54 PM • 3 replies • view on HN

Try QubesOS if you want this, you can have a separate VM for each isolated use-case. The OS itself is a lightweight hypervisor around the VMs (called "Qubes").


Replies

palijer • yesterday at 5:10 PM

In the current LLM cybersecurity climate, I honestly can't say with 100% certainty anymore that something like a VM acts as a completely infallible sandbox environment for the next couple decades.

➕ show 2 replies
BlobberSnobber • yesterday at 5:08 PM

The idea is awesome, the implementation looks great as well, but hardware support is super limited.

pull_my_finger • yesterday at 7:22 PM

Isn't the container ecosystem basically the same problem with more packages? You pull an OS package, a language runtime package, etc etc. It's something I've been thinking about also