Imagine how cool it'd be if it was easy to compile Node to binaries; and then compile that to non-privileged self-executing containers
-
Throw in some capsicum for capabilities style security and your good to go
-
-
Lots to read here https://www.cl.cam.ac.uk/research/security/capsicum/ … The idea is that if you sandbox a pkg-node app then would you need OS container?
-
Started looking this in pkg and it's patch system means its doable but a manifest thing like a browser ext would be needed if capsicum used
- 1 more reply
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.