alt Hacker NewsThere are yet thousands of these so-called "sandbox" projects that exists. This one sounds rather really wasteful on resources?
Bubblewrap would just be a better alternative for this.
Replies
kakugawa • yesterday at 6:52 PM
bwrap has a lot of sharp edges that can bite you, if you're not aware of them.
jFriedensreich • yesterday at 6:53 PM
bubblewrap is linux only and offers a fraction of isolation of a microvm
right chain of tought, but systemd is the only to truly leverage linux namespaces capabilities, allowing private networks, other rootfs, etc