← Back to context

Comment by aniceperson

20 hours ago

thanks but i will just use systemd with linux namespaces.

That's a layer of protection, but it still exposes your real Linux kernel to the sandbox, and that's more CVEs than I'd consider ideal.