7 comments

[ 3.0 ms ] story [ 26.3 ms ] thread
Seems very cool, but limited to compiled software if I read it correctly?
An interpreted program is just a compiled program (the interpreter) that reads a few text files.
So basically a chroot jail running a process as an unprivileged user.

Cool new tech!

Yes, plus a network namespace with its own IP and limits to memory/CPU/IO.