3 ms·
One is not like the others - firejail is aimed at more of desktop type applications you interact with, where the others can do so but are more suited for arbitr
by beardedwizard 2y ago
One is not like the others - firejail is aimed at more of desktop type applications you interact with, where the others can do so but are more suited for arbitrary workloads.
A parent comment mentions ebpf syscall interception, many end up combining gvisor and nsjail and seccomp.