Hacker News new | ask | show | jobs
by yjftsjthsd-h 817 days ago
There's always x11docker, which AFAICT is actually quite good about sandboxing/isolating the app from the system.