Hacker News new | ask | show | jobs
by cyphar 3605 days ago
For those interested in OCI-compatible runtimes, I'm currently implementing rootless containers for runC[1]. This would allow you to get the same sort of unprivileged sandboxing but with a popular container runtime.

[1]: https://github.com/opencontainers/runc/pull/774