Real Sandbox Containers

Getting Towards Real Sandbox Containers Sunday, May 1, 2016 · 5 min read - Containers are currently very popular, utilizing Linux features such as user namespaces and seccomp to create secure application environments known as sandboxes. - A well-known example of this is the Chrome sandbox, which employs user namespaces and seccomp in a way that is similar to container functionalities. - The main distinction is that Chrome operates as an unprivileged user, whereas most containers execute as the root user, necessitating root privileges for their creation and operation.