Right now on my Mac I use a messy combination of Docker containers, sandbox-exec... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		simonw 6 months ago \| parent \| context \| favorite \| on: A quick look at unprivileged sandboxing Right now on my Mac I use a messy combination of Docker containers, sandbox-exec, bits and pieces of WebAssembly and mostly don't bother at all. I want the friction on this to be way lower. I'd like everything to run in a sandbox by default.

fsflover 6 months ago [–]

> I want the friction on this to be way lower. I'd like everything to run in a sandbox by default.

You've just described Qubes OS: https://qubes-os.org. My daily driver, can't recommend it enough.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact