perner on Nostr: cinerion Jesus, what a mess. i didn't know debian was like that either >jails or some ...
cinerion (npub1nts…y4mr) Jesus, what a mess. i didn't know debian was like that either
>jails or some form of containerization?
no.
theres pledge(2) and unveil(2), which limit system calls and filesystem access to programs that use it respectively. but the program/service has to be compiled with it. vmm(4) for virtualization and chroot are there too
best you could do to "isolate" services would be to create a homedir and user for each one, probably
i do recommend doe, piss easy to use and maintain. plus security and epeen. and nigga fish lips
Published at
2024-10-22 06:37:15Event JSON
{
"id": "c3bd38111e3fb9745609fa2951c7857940a60149e687053bb70bc47427a76680",
"pubkey": "fb963a709816d4f9fdec6d5375d788a29cd346a6eac195cdb3ae104d01ebc59f",
"created_at": 1729579035,
"kind": 1,
"tags": [
[
"p",
"9ae12085d359d0ef612b473809d182e9d0232b7d077f544b8650324d8d30c535",
"wss://relay.mostr.pub"
],
[
"e",
"b3e34217398a8c7f5e53539fd560676654c01ab77f0021d0e9a3d198e540005f",
"wss://relay.mostr.pub",
"reply"
],
[
"emoji",
"puffy",
"https://cum.salon/emoji/software/puffy.png"
],
[
"proxy",
"https://cum.salon/objects/742f53a1-2daf-46e0-b329-42dfdf9272bd",
"activitypub"
]
],
"content": "nostr:npub1ntsjppwnt8gw7cftguuqn5vza8gzx2maqal4gjux2qeymrfsc56s7my4mr Jesus, what a mess. i didn't know debian was like that either\n\n\u003ejails or some form of containerization?\nno. \n\ntheres pledge(2) and unveil(2), which limit system calls and filesystem access to programs that use it respectively. but the program/service has to be compiled with it. vmm(4) for virtualization and chroot are there too\n\nbest you could do to \"isolate\" services would be to create a homedir and user for each one, probably\n\ni do recommend doe, piss easy to use and maintain. plus security and epeen. and nigga fish lips :puffy:",
"sig": "fd3edf2de36831bf22fe37c3327eeb6d0646636518ef6237ae293c20171c99e69b5dbeae38b6483066790e368824fdeebcfcbe6ea8154f92e7914b44416075af"
}
