Current state of linux application sandboxing. Is it even as secure as Android ?

• ipfs-nix-guide

  2 57 10.0

  IPFS × Nix Guide

  

I would consider Nix superior, just a gut feeling, especially when https://github.com/obsidiansystems/ipfs-nix-guide exists. The integration of P2P with opensource is perfect and I have never seen it elsewhere. Flatpak is limiting as I can't I use it to sandbox things not installed by it.

• v86

  153 19,092 9.0 Rust

  x86 PC emulator and x86-to-wasm JIT, running in the browser

Simply by enabling JavaScript you are running untrusted code inside the sandbox that is the JS engine of your browser. Things like http://copy.sh/v86/ can run Windows or Linux inside this sandbox. So, you are saying that you fully trust each snippet of JS that your browser downloads?

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• Conty

  42 646 8.1 Shell

  Easy to use unprivileged Linux container packed into a single portable executable

I'd imagine the sandbox options are bubblewrap presets, though -- you'd probably want to look around conty-start.sh for more details or ask in the GitHub Discussion.

• nixpak

  2 238 7.8 Nix

  Runtime sandboxing for Nix

  

Are you aware of https://github.com/nixpak/nixpak

Suggest a related project