Standard containerization technology (e.g. docker) isn’t designed to sandbox unt... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

ummonk on Nov 22, 2019 | parent | context | favorite | on: We tested popular web hosting companies and all we...

Standard containerization technology (e.g. docker) isn’t designed to sandbox untrusted code.

inetknght on Nov 22, 2019 [–]

Do tell what is designed to sandbox untrusted code

jturpin on Nov 22, 2019 | | [–]

AWS Has written Firecracker for this purpose https://firecracker-microvm.github.io/

javajosh on Nov 22, 2019 | | [–]

Xen Hypervisor can do that https://xenproject.org/developers/teams/xen-hypervisor/

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact