Hacker News new | past | comments | ask | show | jobs | submit login

In this post the author links to one of her previous posts[0], where she wrote:

> As a proof of concept of unprivileged containers without cgroups I made binctr. Which spawned a mailing list thread for implementing this in runc/libcontainer. Aleksa Sarai has started on a few patches and this might actually be a reality pretty soon!

Does anybody know if this made it into runc/libcontainer? I'm not an expert on these technologies but would love to read through docs if it has been implemented.

[0] https://blog.jessfraz.com/post/getting-towards-real-sandbox-...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: