[rmkrmk]

Are there any somewhat easy-to-use solutions to isolate a development environment? Preventing or at least decreasing the damage malicious packages could do? Like deleting files or uploading a private ssh key/keychain to a 3rd party server?

I was looking into things like GitHub Codespaces, I believe they're isolated per repository and integrated into VS Code, but I'd like something I could run on my machine or a server of mine.

[kccqzy]

Seriously, but make multiple user accounts on your computer. That's the traditional UNIX way of enforcing isolation, and it goes back to the days of hundreds of people sharing one single UNIX machine.

And don't give any software root access.

[jart]

Faraday cage? It's a turnkey solution.

[jacooper]

Docker containers?

[rmkrmk]

Just found out that there's an extension to use Docker/Podman within VSCode which works on a local or remote machine.

https://code.visualstudio.com/docs/devcontainers/containers