5 ms·
NsJail: A lightweight process isolation tool
- betaby 11y agoWhat I find missing in current state of containers is a lack of surrounding utils. For example LXC-* still didn't reach the same level of functionality as say vzctl. Having light non LXC dependent tool like NsJail is nice thought, especially to quickly test something in the separate environment.
- mkj 11y agoAh, I'd missed that CLONE_NEWUSER lets you do "chroot" as non-root. That's useful.
- stefanha 11y agoMost of these settings are available to systemd unit files. Is there anything unique here that isn't available?