3 ms·
actually when it is a docker container running with gvisor, it is a real sandbox. without it, it definitv isn't. (https://gvisor.dev/ https://gvisor.dev/)
by merb 7y ago
actually when it is a docker container running with gvisor, it is a real sandbox. without it, it definitv isn't. (https://gvisor.dev/ https://gvisor.dev/)