TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

NsJail: A light-weight process isolation tool for Linux

64 点作者 yamrzou4 个月前

5 条评论

qbane4 个月前
I have forked this project long ago and have built an online judge utilizing its BPF integration to filter out unwanted syscalls. The fork implements the time&#x2F;mem usage reporting to satisfy the judge&#x27;s need and it has improved my knowledge to modern Linux kernels.<p>There were some rough edges back then, but it had been my go-to tool to run user-provided code in isolation.<p><a href="https:&#x2F;&#x2F;github.com&#x2F;NeoHOJ&#x2F;nsjail">https:&#x2F;&#x2F;github.com&#x2F;NeoHOJ&#x2F;nsjail</a>
5-4 个月前
it&#x27;d be interesting to see a comparison of these -- the building blocks are (mostly) the same, but the interfaces differ in interesting ways:<p>- nsjail<p>- firejail<p>- bubblewrap<p>- runc<p>etc.
评论 #42946620 未加载
评论 #42949733 未加载
评论 #42948760 未加载
评论 #42946335 未加载
评论 #42945646 未加载
评论 #42946696 未加载
aa-jv4 个月前
A few decades back we had the ability to cryogenically freeze processes, save them to storage, move the bins to another system, and defrost them to be run again. This was a great feature that I had hoped would make its way into mainstream kernels, but it seems to have disappeared off the face of the earth.<p>I wonder if the expansion of process isolation tooling will ever lead us back to this situation again, anyone know? It seems to me that strict isolation would be a vital rudimentary requirement for cryofreezing processes...
评论 #42946417 未加载
评论 #42946459 未加载
评论 #42953967 未加载
评论 #42946443 未加载
oulipo4 个月前
Is there an equivalent for MacOS ?
评论 #42947881 未加载
Alifatisk4 个月前
So this is like jails for BSD?