Home | Notifications | New Note | Local | Federated | Search | Logout

Note Detail

Reply to @phnt@fluffytail.org
menherahair :redeyeorb:@menherahair@eientei.org (2026-10-25 19:36:35)
@phnt this is all because distros stop shipping rootfs. I will not elaborate
as an aside I think docker may be eating at the collective ("collective") ability to actually use container capabilities of systems which is very sad. freebsd is obviously very proud of jails and there's lots of resources on them but bsd sucks ass. linux namespaces are similarly awesome but it's like space magic to most people. lxc can easily do nested containers for you, that'd do wonders for some setups but how many project test for this, let alone tell you to do it?
"hi can I sandbox this" ye use docker, solved clossed not an issue eot
---Reply---
Blurry Moon@sun@shitposter.world (2026-10-25 20:10:10)
@menherahair @phnt capability-based operating system design solved this in 1966 but the entire industry other than a few cell phone companies and Google with Fuschia have completely ignored it for the "pile of shit in a leaky bag" design

---Replies---

Blurry Moon@sun@shitposter.world (2026-10-25 20:13:05)
@menherahair @phnt imagine you didn't have to sandbox your applications at all because no application could do even a single thing without having been launched with an unforgeable capability for it.

≠@amerika@fsebugoutzone.org (2026-10-25 21:22:09)
@sun @menherahair @phnt 

Watch interest be revived because the current way of doing things has increased costs and decreased performance.