Skip to content

Comment on Using bubblewrap to add sandboxing to NetBSDparent

Comments

I think much of what the BSDs offers can be achieved with Linux (and hardened Linux is probably just as secure), but it can be a lot more work and there is less guidance.

Locking down an Openbsd system is quite easy for example as it tries to have sane defaults. I find myself more in the dark with Linux.

Installing zfs on Linux is possible, but again can be a lot of work and it doesn't cleanly integrate with containers the same way zfs integrates with jails on Freebsd.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.