Comment by throwaway6734
21 hours ago
https://docs.docker.com/ai/sandboxes/ Any idea on how that compares to this docker feature in development?
21 hours ago
https://docs.docker.com/ai/sandboxes/ Any idea on how that compares to this docker feature in development?
Docker containers use cgroups and namespaces etc (the usual kernel level isolation)
Docker sandboxes use microvms (i.e. hardware level isolation)
Bubblewrap uses the same technology as containers
I am unsure about seatbelt.