3 ms·
Why do you say that? Eg, if used with Colima in macOS, it means I can run a devcontainer in an isolated VM and Nono inside the devcontainer can restrict a lot
by LeBit 2mo ago
Why do you say that?
Eg, if used with Colima in macOS, it means I can run a devcontainer in an isolated VM and Nono inside the devcontainer can restrict a lot what can and cannot be done.
You get credentials proxying and network outbound limits.
How is Docker Sandbox better sandboxed?
- speedgoose 2mo agoYeah but that’s Colima and Nono then. Not only Nono.
- isityettime 2mo agoTrue. But it's also an illustration of how relying on an OS' native sandboxing capabilities is nicely composable with other isolation techniques.