News for hackers. Stuff that matters.

A comment on Don't YOLO your file system. Parent comment

Re:Don't YOLO your file system by AnotherGoodName on Friday March 27, 2026 @10:11PM (#47550840)
https://code.claude.com/docs/en/sandboxing says they integrated bubblewrap (linux/windows), seatbelt (macos) and give an error if sandbox can't be supported so appears to be real.
[ Parent | on HN ]
Re:Don't YOLO your file system by throwaway6734 on Friday March 27, 2026 @10:13PM (#47550855)
https://docs.docker.com/ai/sandboxes/ Any idea on how that compares to this docker feature in development?
[ Parent | on HN ]
Re:Don't YOLO your file system by figmert on Friday March 27, 2026 @11:43PM (#47551388)
Docker containers use cgroups and namespaces etc (the usual kernel level isolation)

Docker sandboxes use microvms (i.e. hardware level isolation)

Bubblewrap uses the same technology as containers

I am unsure about seatbelt.

[ Parent | on HN ]