• assaultpotato@sh.itjust.works
    link
    fedilink
    arrow-up
    38
    ·
    edit-2
    12 hours ago

    Using cgroups for isolating processes into their own individual network, filesystem, user, etc. namespaces using a shared kernel?

    You mean containers?

    • KindaABigDyl@programming.dev
      link
      fedilink
      arrow-up
      2
      ·
      edit-2
      6 hours ago

      No my proposed solution uses the “everything-is-a-file” aspect of Unix-like systems with the built-in permissions systems around files. You don’t need cgroups at all for what I’m suggesting