M1 dev setup with a virtual Linux box

Re:M1 dev setup with a virtual Linux box by j1elo on Sunday April 11, 2021 @11:45AM (#26771117)

I'm just now learning about the container technologies that are alternatives to Docker. More precisely, LXC, in case you had it in mind in your comment.

Do you know of a set of settings or tips to follow for making containers as safe as a VM?

[ Parent | on HN ]

Re:M1 dev setup with a virtual Linux box by fpoling on Monday April 12, 2021 @07:13AM (#26778090)

I use systemd-nspawn containers with max security options, like user namespaces, syscall filters, no-new-priveleges. Even with the user namespaces I do not run as a root in the user namespaces unless I need to install extra software inside the container.

[ Parent | on HN ]