Hacker News new | past | comments | ask | show | jobs | submit login

I run WhatsApp, Messenger, and and couple of Slack channels, as separate 'applications' by using the '--app=<url>' when launching Chrome. However they are not sandboxed.

Chromium can be run in portable mode, so I guess you could sandbox apps by having separate side-by-side Chromium installs. That said, this tool is probably easier to use.

Do the --profile-directory / --user-data-dir flags help here?

I am wondering whats the difference. So far I was able to find this explaining the flags:

  profile-directory: // Selects directory of profile to associate with the first browser launched. [1]

  user-data-dir: // Specifies the user data directory, which is where the browser will look for all of its state. [2]
But to be honest I am not sure I understand that completely. I mean there is also some documentation stating that the user-data-dir contains profile data[3]. Does anybody what the actual difference is?

[1]: https://chromium.googlesource.com/chromium/src/+/lkgr/chrome...

[2]: https://chromium.googlesource.com/chromium/src/+/lkgr/chrome...

[3]: https://chromium.googlesource.com/chromium/src/+/master/docs...

Yes, the page suggests to sandbox using -user-data-dir.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact