12 points | by edunteman 6 hours ago ago
4 comments
Have been testing this in dev and really like the performance so far
Hell yeah, love to hear it! Happy to answer any questions or issues you run into
so user gets all of the dependencies and apps in userspace to run as well? but each of the command runs in its own more secure shell of some sorts?
Correct, your PATH resolves to your local tools as if it was unprotected bash, but syscalls are filtered/virtualized
Have been testing this in dev and really like the performance so far
Hell yeah, love to hear it! Happy to answer any questions or issues you run into
so user gets all of the dependencies and apps in userspace to run as well? but each of the command runs in its own more secure shell of some sorts?
Correct, your PATH resolves to your local tools as if it was unprotected bash, but syscalls are filtered/virtualized