Talk:Packaging/Binaries

From NixOS Wiki
Revision as of 09:25, 2 October 2021 by imported>Nix (add Spectrum)

Latest comment: 2 October 2021 by Nix in topic untrusted binaries

untrusted binaries

packaging and running untrusted binaries on nixos?

for example jdownloader is closed source, so i want to limit access to files, clipboard, etc.

--Milahu (talk) 16:47, 1 October 2021 (UTC)Reply

A virtual machine is most robust. X11docker a good combo; x11docker supports Kata Containers, which aims to combine the security of VMs with speed of containers. Security a good page for this too. Spectrum OS is a Nix-based design with similar aims; they were looking at crosvm with virtio_wl. — Nix Nix (talk) 09:24, 2 October 2021 (UTC)Reply