Hacker News new | ask | show | jobs
by cassianoleal 1440 days ago
> the sandboxing capabilities are great

I find the sandboxing to be very subpar. It works for the most basic use-cases but for anything with slightly more complicated requirements you're better off scripting your way through cgroups and namespaces.

1 comments

Out of interest, got examples of those use-cases where it does not work?