IssueRaiser

It has gotten simpler, especially for things like testing safely.

It has gotten simpler, especially for things like testing safely. If you don't think about it as docker, or containers, the ability to sandbox things with namespaces and cgroups is almost magical. It's effectively instant and much more effective than just chroot. "Run something with no -- or very specific -- network access" was a really annoying problem to solve (LD_PRELOAD?) in the before times.

Posted by smw on Mar 13, 2021, 10:32 PM

Tags

Related issues

Raise real-world problems, find people facing the same issue, and discuss solutions.3,000 issues0 comments

hackernews (Network)

It has gotten simpler, especially for things like testing safely.

smwMar 13, 2021, 10:32 PM

It has gotten simpler, especially for things like testing safely. If you don't think about it as docker, or containers, the ability to sandbox things with namespaces and cgroups is almost magical. It's effectively instant and much more effective than just chroot. "Run something with no -- or very specific -- network access" was a really annoying problem to solve (LD_PRELOAD?) in the before times.

Comments (0)

No comments yet. Start the discussion.

Comment on this issue