News for hackers. Stuff that matters.

A comment on Tiny Linux distro that runs the entire OS as Docker containers.

Re:Tiny Linux distro that runs the entire OS as Docker conta... by hobarrera on Saturday April 29, 2017 @03:57PM (#14228416)
I'd really love to see some of this stuff transition to the desktop too.

Like, for example, containerize Skype, so that it can't read my home. Or contain Firefox to just read `~/.mozilla` and `~/downloads`.

For binary blobs I don't trust that much, I'd really value this.

For FLOSS stuff, it still provides protection from bugs.

[ Parent | on HN ]
Re:Tiny Linux distro that runs the entire OS as Docker conta... by runeks on Sunday April 30, 2017 @02:35AM (#14230424)
Problem is it's sometimes more annoying than helpful, e.g. having to copy files into the ~/.mozilla directory in order to be able to upload them to Dropbox via Firefox, or attach to an email.
[ Parent | on HN ]
Re:Tiny Linux distro that runs the entire OS as Docker conta... by wasted_intel on Saturday April 29, 2017 @04:03PM (#14228439)
Look at http://flatpak.org for precisely that.
[ Parent | on HN ]
Re:Tiny Linux distro that runs the entire OS as Docker conta... by hobarrera on Saturday May 06, 2017 @06:37PM (#14282633)
Nope, it does a lot more: it re-packages software, and basically shoves a second package manager down my throat; one that actually bundles dependencies within in package, carrying along all the issues that that flow brings with it.

I want to isolate data, no libraries. Libraries are there to be shared.

[ Parent | on HN ]
Re:Tiny Linux distro that runs the entire OS as Docker conta... by nekohacker on Saturday April 29, 2017 @05:58PM (#14228997)
Qubes (https://www.qubes-os.org/) is a good fit for this.
[ Parent | on HN ]
Re:Tiny Linux distro that runs the entire OS as Docker conta... by hobarrera on Saturday May 06, 2017 @06:38PM (#14282640)
Yeah, creating a new OS/distribution will never fix the problem. You can't tell people "Oh, just wipe everything clean and installing this other OS".

It needs to build on top of what we have, otherwise adoption will never take place.

[ Parent | on HN ]
Re:Tiny Linux distro that runs the entire OS as Docker conta... by viraptor on Saturday April 29, 2017 @07:14PM (#14229301)
Apparmor does that for you. Or selinux, depending on your distro.
[ Parent | on HN ]
Re:Tiny Linux distro that runs the entire OS as Docker conta... by digi_owl on Saturday April 29, 2017 @09:58PM (#14229785)
Firejail.
[ Parent | on HN ]