News for hackers. Stuff that matters.
Re:Oasis: Small statically-linked Linux system by goodpoint on Sunday August 14, 2022 @03:00PM (#32461896)
> Docker provides much more isolation

The very opposite. You can do all the sandboxing you want without needing docker and you will avoid docker's big attack surface.

Re:Oasis: Small statically-linked Linux system by naasking on Sunday August 14, 2022 @09:09PM (#32464753)
Not without machine code analysis. That's a pretty big attack surface itself if you're relying on it for safety properties.