Show HN: BVisor – An Embedded Bash Sandbox, 2ms Boot, Written in Zig

 (github.com)

13 points | by edunteman 8 hours ago

2 comments

  • JoshPurtell 7 hours ago
    Have been testing this in dev and really like the performance so far
    [-]
    • edunteman 6 hours ago
      Hell yeah, love to hear it! Happy to answer any questions or issues you run into
  • vrn21 5 hours ago
    so user gets all of the dependencies and apps in userspace to run as well? but each of the command runs in its own more secure shell of some sorts?
    [-]
    • edunteman 5 hours ago
      Correct, your PATH resolves to your local tools as if it was unprotected bash, but syscalls are filtered/virtualized