SamatsWiki

• ProcessIsolation

• Immutable Page
• Comments
• Info
• Attachments
• More Actions: Raw Text Print View Render as Docbook Delete Cache ------------------------ Check Spelling Like Pages Local Site Map ------------------------ Rename Page Delete Page ------------------------ Subscribe User ------------------------ Remove Spam Revert to this revision Package Pages Sync Pages ------------------------ Load Save SlideShow

Notes on Linux/UNIX process isolation, jailing (à la Docker, podman), etc.

Software:

• nsjail.dev

• minijail. Sandboxing and containment tool used in ChromeOS and Android.

• firejail. Linux namespaces and seccomp-bpf-based sandboxing.

• MoinMoin Powered
• Python Powered
• GPL licensed
• Valid HTML 4.01