4 ms·
I've been testing this on Docker today, including the credential injection, env vars, net calls control. I will add more docs but one interesting use case would
by afshinmeh 6mo ago
I've been testing this on Docker today, including the credential injection, env vars, net calls control. I will add more docs but one interesting use case would be to have something like `zerobox --profile nanoclaw -- nanoclaw`, or something similar.
I'd like to hear your thoughts.
- rao-v 6mo agoI'll give it a shot later today, but basically you need a pretty specific seccomp profile (see my example - I pulled from the podman repo) to allow bubblewrap to run inside an unpriviledged docker.