3 ms·
Docker seems a bit unwieldy for this use case. Given it runs in a Linux VM on macOS, wouldn't all these commands have considerable overhead? On Linux, the pled
by imiric 3y ago
Docker seems a bit unwieldy for this use case. Given it runs in a Linux VM on macOS, wouldn't all these commands have considerable overhead?
On Linux, the pledge utility[1] seems like a better fit for this. I'm not aware of what the macOS alternative would be, but considering this functionality stems from OpenBSD, maybe it can be ported to Darwin?
[1]: https://justine.lol/pledge/ https://justine.lol/pledge/
- orangea 3y agoMac doesn't have seccomp so no. The functionality could be implemented but it would have to use a completely different mechanism.