3 ms·
Docker containers probably aren’t enough isolation. But throw some firecrackervm in the pot and you’ve got a stew going.
by camdenreslink 3y ago
Docker containers probably aren’t enough isolation. But throw some firecrackervm in the pot and you’ve got a stew going.
- rohitpaulk 3y agoRepl.it uses Docker containers too, only recently started work on moving to better isolation mechanisms like VMs
- wahnfrieden 3y agoI'm using https://github.com/live-codes/livecodes https://github.com/live-codes/livecodes to just move it all completely into the client with a replit-like alternative thing we're working on
- rmorey 3y agoAt replit every repl is indeed a docker container, but that is absolutely not the primarily isolation mechanism. Here’s a comment from CEO @amasad to that effect in 2019 (so, even more secure now I am certain) https://news.ycombinator.com/item?id=19215175 https://news.ycombinator.com/item?id=19215175