‹ BackHN Continuity

Thread

Show HN: NSL – WSL for Linux

167 points · 111 comments · bketelsen

  1. 0x457 · · focus · HN ↗
    I'm confused why VM + systemd-nspawn? From my understaing WSL 2 runs a single VM + something like systemd-nspawn per "linux installation", but it runs a VM because it needs linux kernel. Why not just do systemd-nspawn if you alread on linux?
    1. pkulak · · focus · HN ↗
      Way better isolation, is my guess. Plus, you can use a different kernel this way.

      I used to poo-poo when people said that containers aren't a _real_ security boundary, at least for personal stuff, and not a multi-tenant server. But I bet even mid-tier LLMs can break out of LXC/Docker/nspawn at this point.

      1. fhn · · focus · HN ↗
        can they not break out of a VM?
        1. pkulak · · focus · HN ↗
          It's at least harder! Better chance it'll hit your 5-hour limit before it does. haha
          1. esseph · · focus · HN ↗
            See my response to the above comment
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.