3 ms·
If there is anything docker is helping a lot with, this is probably one. Except when you volume mount, but then damage is probably limited!
by tehlike 7y ago
If there is anything docker is helping a lot with, this is probably one. Except when you volume mount, but then damage is probably limited!
- danieldk 7y agoOr NixOS/Guix, which treat the system as immutable (ie. in Nix pretty much everything but the Nix store at /nix is built after boot anyway). Or macOS by using a read-only system volume. The grandparent bug is as much a failing of the grandparent's script as the OS, which exposes itself as one global mutable namespace.