3 ms·
This seems very similar to Bubblewrap: https://github.com/projectatomic/bubblewrap https://github.com/projectatomic/bubblewrap
by jeblair 9y ago
This seems very similar to Bubblewrap: https://github.com/projectatomic/bubblewrap https://github.com/projectatomic/bubblewrap
- catern 9y agoI don't see anything to suggest that nsjail has the main feature of bubblewrap: It is safe to make bubblewrap setuid-root, and therefore bubblewrap is a safe way for unprivileged users to use containers. (arguably the only safe way at the moment) Without nsjail making that guarantee, nsjail is just yet another command line interface to namespaces.