Re:Steam for Linux client adds support for Linux namespaces
by bscphil on Sunday November 10, 2019 @09:26PM
(#21501657)
That's a good point! Maybe that's the source of it. I've gotten used to it for a couple of statically compiled long-lived binaries (games), but other than that even software I compile myself gets packaged before I install it.
[ Parent
| on HN ]
Re:Steam for Linux client adds support for Linux namespaces
by edoo on Monday November 11, 2019 @12:49AM
(#21502482)
You can run GPU accelerated apps in a container. You just need to install the same video driver and expose the x11 socket and card device. The app could still be evil and screen scrape or key log but at least it has no access to your filesystem and when the container is off it is truly off (assuming reasonable container security). There are several tutorials out there for at least browsers.