3 ms·
Rather than being hopeful why not start running 'uv' inside sandbox? Why does your python package (cli/Web server/library) need full access to your full disk a
by ashishb 6mo ago
Rather than being hopeful why not start running 'uv' inside sandbox?
Why does your python package (cli/Web server/library) need full access to your full disk at the time of execution?
- dist-epoch 6mo agoYou're doing all of your software development inside containers, all the time? That is very inconvenient.
- TheTaytay 6mo agoDevcontainers are looking pretty gold right now…
- LtWorf 6mo agoWhy? Just open your entire editor/whatever inside a limited namespace and that's it no?
- ashishb 6mo ago> Why? Just open your entire editor/whatever inside a limited namespace and that's it no? How will that prevent `npm run dev` or `uv run python` from accessing files outside your current directory?
- ghgr 6mo agoI'd argue it's not only not inconvenient, but also a great way of keeping your system clean of all the random system-wide dependencies you'll end up accumulating over the years.
- ashishb 6mo ago> That is very inconvenient. All executions (especially of random third-party code) inside the containers are not inconvenient at all for me. Infact, I even open-sourced my setup - https://github.com/ashishb/amazing-sandbox https://github.com/ashishb/amazing-sandbox
- cestivan 6mo ago[dead]