top | item 43196714

(no title)

lotharcable2 | 1 year ago

This is correct.

I think it may add a bit of security, but containers are better thought of as mechanism to deploy and manage applications/services.

They can be useful as part of a security posture, but you kinda have to wrap everything up in SELinux or as part of some other system. Which is a lot easier to do with containers then it is to do with normal applications.

Also for most purposes:

If you want to integrate container applications into your desktop you'd be better off with something like Flatpak or distrobox/toolbx.

there are lots of things that these applications do to setup the environment and integrate into your home directory that isn't going to be done with simple scripts like this.

That doesn't mean that these scripts are useless, of course. I you want to run a application with more isolation and less integration then it is a lot easier to do it this way then with something like distrobox.

Like if you don't want to give a application access to your home directory. Or want to emulate a container environment for the cloud locally so you can hack on it.

discuss

order

No comments yet.