Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Self-improving sandboxed agent with memory and scheduling

github.com

Post reply on HN
Print view View original

1–3 of 3 posts

Re: Show HN: Self-improving sandboxed agent with memory and scheduling

#2

Post by byalphas »

How does this compare to just using systemd's sandboxing? ProtectSystem=strict, PrivateDevices, RestrictNamespaces etc. give you a pretty solid sandbox for any long-running daemon without extra tooling. Genuine question — I've been relying on systemd hardening for my own projects and wondering what I'm missing.

Re: Show HN: Self-improving sandboxed agent with memory and scheduling

#3

Post by grimm8000 »

byalphas wrote: post #2

How does this compare to just using systemd's sandboxing? ProtectSystem=strict, PrivateDevices, RestrictNamespaces etc. give you a pretty solid sandbox for any long-running daemon without extra tooling. Genuine question — I've been relying on systemd hardening for my own projects and wondering what I'm missing.

Isn't that Linux only?
Post reply on HN