@[email protected] to [email protected] • 9 months agoHave you tried NixOS?lemmy.mlimagemessage-square124fedilinkarrow-up1833
arrow-up1833imageHave you tried NixOS?lemmy.ml@[email protected] to [email protected] • 9 months agomessage-square124fedilink
minus-square@[email protected]linkfedilink18•9 months agoIt build in a sandbox, but it’s not run in a sandbox.
minus-square@[email protected]linkfedilink2•9 months agoI don’t understand, if you run a program inside the sandbox and the program ask for a library, the kernel need to map the library from inside the sandbox to the program, that overhead that I’m talking about
minus-square@[email protected]linkfedilink17•9 months agoBut it’s not run in a sandbox. I’m not sure where you get this from.
minus-square@[email protected]linkfedilink22•9 months agoThis is not how NixOS works. Programs directly link against libraries in the store. There is no sandbox by default when running the binaries.
It build in a sandbox, but it’s not run in a sandbox.
I don’t understand, if you run a program inside the sandbox and the program ask for a library, the kernel need to map the library from inside the sandbox to the program, that overhead that I’m talking about
But it’s not run in a sandbox. I’m not sure where you get this from.
This is not how NixOS works. Programs directly link against libraries in the store. There is no sandbox by default when running the binaries.