Hacker News new | ask | show | jobs
by jeblair 3175 days ago
This seems very similar to Bubblewrap: https://github.com/projectatomic/bubblewrap
1 comments

I don't see anything to suggest that nsjail has the main feature of bubblewrap: It is safe to make bubblewrap setuid-root, and therefore bubblewrap is a safe way for unprivileged users to use containers. (arguably the only safe way at the moment)

Without nsjail making that guarantee, nsjail is just yet another command line interface to namespaces.