3 ms·
Smarter people than me say that "true" containerizing on OS X is not really a thing[1]. [1] https://github.com/vito/houdini https://github.com/vito/houdini
by jacques_chester 11y ago
Smarter people than me say that "true" containerizing on OS X is not really a thing[1].
[1] https://github.com/vito/houdini https://github.com/vito/houdini
- geofft 11y agoOS X doesn't provide kernel features directly equivalent to Linux's CLONE_* and cgroups. But it does provide Seatbelt, a sandboxing policy layer, which you could use with effort to implement something similar in end result. This is what both iOS apps and desktop App Store apps use for security isolation. Alternatively, you could ship a kernel module that added these features (although that might be ridiculously complicated).
- jacques_chester 11y agoAlex (aka vito) likes implementing things from scratch on weekends. So if you surprised him with a github issue he might just take you up on that challenge.