Hacker News new | ask | show | jobs
by zemlyansky 272 days ago
Would strict containerization help here? (rootless, read-only partial fs access, only the necessary env variables passed, etc)