Or put it in a microvm using eg smolmachines.

bionade24 2 hours ago | parent | next [-]

Using runsc instead of runsc means that there's a hypervisor layer (gvisor, probably) in-between the kernel and the container userland

causal 5 hours ago | parent | prev [-]

I've never used smolmachines but I'm curious; why this over a container?

	▲	apitman 5 hours ago \| parent [-]
		Containers are not security boundaries. Vulnerabilities in containers are much more common than in VMs.