• assaultpotato@sh.itjust.works
    link
    fedilink
    arrow-up
    41
    ·
    1 day ago

    Using cgroups for isolating processes into their own individual network, filesystem, and user namespaces using a shared kernel?

    You mean containers?

    • KindaABigDyl@programming.dev
      link
      fedilink
      arrow-up
      6
      ·
      edit-2
      21 hours ago

      No my proposed solution uses the “everything-is-a-file” aspect of Unix-like systems with the built-in permissions systems around files. You don’t need cgroups at all for what I’m suggesting