4 ms·

Standard containerization technology (e.g. docker) isn’t designed to sandbox untrusted code.

• inetknght 7y ago
  Do tell what is designed to sandbox untrusted code
  • javajosh 7y ago
    Xen Hypervisor can do that https://xenproject.org/developers/teams/xen-hypervisor/ https://xenproject.org/developers/teams/xen-hypervisor/
  • jturpin 7y ago
    AWS Has written Firecracker for this purpose https://firecracker-microvm.github.io/ https://firecracker-microvm.github.io/
  • deleted 7y ago
    [deleted]