5 ms·
If any developers are looking to isolate different dev projects from each other using containers, I wrote a tool for it (using podman), maybe someone finds it u
by evertheylen 1y ago
If any developers are looking to isolate different dev projects from each other using containers, I wrote a tool for it (using podman), maybe someone finds it useful or can thrash its security.
Find the code on https://github.com/evertheylen/probox https://github.com/evertheylen/probox or read my blog post on https://evertheylen.eu/p/probox-intro/ https://evertheylen.eu/p/probox-intro/
- maweki 1y agoWhy didn't toolbox fit your needs? I found toolbox to be a very reasonable way to install development dependencies on a per project basis while not managing multiple hidden filesystems.
- evertheylen 1y agotoolbx is not actually intended to provide any security or isolation, see e.g. https://github.com/containers/toolbox/issues/183 https://github.com/containers/toolbox/issues/183
- lotharcable 1y agoIt would be more accurate to say that toolbx is based on Podman, but is intended to provide tight configuration with your user's outside environment. If you want to use toolbx for more isolation you'll have to end up turn off a bunch of features and configuring it in weird ways that ultimately defeats the purpose of having toolbx in the first place.... It is a lot easier to just to cut out the middle man and use podman directly.
- evertheylen 1y agoFully agree, that's why my python script is ultimately just a simple wrapper for podman but it makes my life a lot easier anyway.