|
|
|
|
|
|
by slonopotamus
1003 days ago
|
|
|
I didn't want to use "jail" term because it is mostly unheard of outside of FreeBSD. Container definition is very stretched nowadays. Look at Windows HostProcesses in Kubernetes [1]. They don't have neither process, network nor device isolation from the host. I also plan to try macOS sandbox-exec tool, which should offer additional isolation from the host. [1]: https://kubernetes.io/blog/2022/12/13/windows-host-process-c... |
|
|