I've been using this for a few months to provide a defensible sandboxed execution environment for internal software stacks.
It's basically a single file bwrap+AppArmor virtualenv wrapper with practically zero startup time and provides a easy way to provide your agent the ability to write code for, and run it against an internal virtualenv software stack.
No container build or equivalent overhead.
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。