alt Hacker NewsI have tested it and the big advantage is that is has access to the local development tools.
But it’s not as well sandboxed for sure.
I have tested it and the big advantage is that is has access to the local development tools.
But it’s not as well sandboxed for sure.
Why do you say that?
Eg, if used with Colima in macOS, it means I can run a devcontainer in an isolated VM and Nono inside the devcontainer can restrict a lot what can and cannot be done.
You get credentials proxying and network outbound limits.
How is Docker Sandbox better sandboxed?