News for hackers. Stuff that matters.

A comment on Bottlerocket, an open source Linux distribution built to run containers. Parent comment

Re:Bottlerocket, an open source Linux distribution built to ... by cslarson on Wednesday September 02, 2020 @09:30AM (#24352995)
Could bottlerocket be the basis for desktop system where it would be easy to switch between isolated environments? It would be very handy to have a maximally secure environment, at least from software perspective, for certain operations.
[ Parent | on HN ]
Re:Bottlerocket, an open source Linux distribution built to ... by _underfl0w_ on Wednesday September 02, 2020 @10:35AM (#24353679)
You may want to look into Qubes. It's not specifically designed for running containers like this is, but it does provide a single OS with multiple isolated environments for different programs.
[ Parent | on HN ]
Re:Bottlerocket, an open source Linux distribution built to ... by __MatrixMan__ on Thursday September 03, 2020 @12:55PM (#24366035)
As _underfl0w_ said, you're pretty much describing Qubes. Using it can be eye opening--nothing works together unless you let it, which is a good way to get a feel for your attack surface / unknown dependencies.

Qubes uses VM's. Subgraph OS is another option. It tries to achieve the same thing with containers, but their latest release is pretty old--not sure how alive that project is.

[ Parent | on HN ]