Hacker News new | ask | show | jobs
by IceWreck 1160 days ago
Why would you run podman inside a vehicle's computer. Cool nonetheless.
2 comments

Perhaps you want to somehow isolate different parts of the car to protect against somehting like the CAN bus attack?
Containers do isolation in userspace, its a pure software thing. Its not doing any kind of hardware isolation nor is it able to.
Don’t they use cgroups? It’s software but the kernel helps.
Well you can ignore all sorts of Compartmentalization and run everything in the same cgroup, same chroot, same user, like how it is on conventional x86_64/aarch64 computers. It just isn't safe.