Hacker News new | ask | show | jobs
by arianvanp 340 days ago
Sandboxing like gvisor is based on syscalls and iouring makes your code syscallless