Re:TinyKVM: Fast sandbox that runs on top of Varnish
by cryptonector on Friday March 14, 2025 @11:57AM
(#43363886)
Well, yes, there's a few system calls like `brk()`/`sbrk()`/`getrandom()`, and what not. But you don't get to open any files or sockets or devices.
[ Parent
| on HN ]
Re:TinyKVM: Fast sandbox that runs on top of Varnish
by fwsgonzo on Friday March 14, 2025 @12:42PM
(#43364384)
For the Varnish integration I added permission-based access to local files. Network stuff can be accessed through custom APIs. A simple fetch(url, options)-like system call. Just have a look at the VMOD repository. It's something I'd like to move into TinyKVM when I feel like it.