Y
Hacker News
new
|
ask
|
show
|
jobs
by
IceWreck
1160 days ago
Why would you run podman inside a vehicle's computer. Cool nonetheless.
2 comments
imp0cat
1160 days ago
Perhaps you want to somehow isolate different parts of the car to protect against somehting like the CAN bus attack?
link
blueflow
1160 days ago
Containers do isolation in userspace, its a pure software thing. Its not doing any kind of hardware isolation nor is it able to.
link
TheCondor
1160 days ago
Don’t they use cgroups? It’s software but the kernel helps.
link
ElectricalUnion
1160 days ago
Well you can ignore all sorts of Compartmentalization and run everything in the same cgroup, same chroot, same user, like how it is on conventional x86_64/aarch64 computers. It just isn't safe.
link