There have been multiple accounts created with the sole purpose of posting advertisement posts or replies containing unsolicited advertising.

Accounts which solely post advertisements, or persistently post them may be terminated.

Has anyone used nsjail? Any thoughts?

I recently learned about nsjail, a utility to sandbox applications or provide workload isolation.

It seems to be lighter weight than firejail and possibly better suited for server applications.

Has anyone used this? What’s your experience with it? I’m curious about using it for my web server applications as an additional layer of Dr hotty.

2xsaiko ,
@2xsaiko@discuss.tchncs.de avatar

server applications

Note that systemd can use most if not all of the isolation features nsjail lists in the readme already for services it manages.

matcha_addict OP ,

I’ve been curious about that. I use openRC, so I don’t have access to systemd. Not out of any systemd conspiracies, I just liked simplicity of openRC.

2xsaiko ,
@2xsaiko@discuss.tchncs.de avatar

Ah, yeah openrc is nice and I used it for a long time with gentoo, but it does lack a lot of the useful features like this one.

taaz ,

Afaik RedBot (oss, extensible discord bot in Python) used it to allow people to run python scripts directly from discord without access to the file system, network and to limit the run time.

In my book I’ve had categorised it as a lower-level tool for security and sandboxing, a lot lower level then firejail is.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • [email protected]
  • random
  • lifeLocal
  • goranko
  • All magazines
    •