thanks but i will just use systemd with linux namespaces.
That's a layer of protection, but it still exposes your real Linux kernel to the sandbox, and that's more CVEs than I'd consider ideal.
That's why I keep the hardware separate and a loaded shotgun in the corner. You can never be too careful.
Don't waste your buckshot when a power strip switch will do !
That's a layer of protection, but it still exposes your real Linux kernel to the sandbox, and that's more CVEs than I'd consider ideal.
That's why I keep the hardware separate and a loaded shotgun in the corner. You can never be too careful.
Don't waste your buckshot when a power strip switch will do !