Thread

1. zenoprax · 1790094776 · focus · HN ↗

   Can you explain a bit more about the boundary between the environment and my system? Is it just giving read-only access to /usr/lib?

   I use an alias to launch a Podman container with opencode in $PWD. It is fully ephemeral aside from the directories I map to it (usually a couple configs). XDG_HOME is local to that working dir. My only frustration is that my image is too minimal but that can be resolved.

   1. nign · 1790096987 · focus · HN ↗

      This section of the docs might be helpful for you <a href="https:&#x2F;&#x2F;droprun.sh&#x2F;docs&#x2F;sandbox-overview&#x2F;#filesystem-layout" rel="nofollow">https:&#x2F;&#x2F;droprun.sh&#x2F;docs&#x2F;sandbox-overview&#x2F;#filesystem-layout

Unofficial Hacker News client; not affiliated with Y Combinator.