Hacker News Reader

Comment by chrisMyzel | Hacker News Reader

Thumbsup for sandstorm - my conpany is extensivly using it with a small team and external clients.

For those who dont know what it is:

Single Sing On with an App Store. Better explained:

You create one account and then can create/edit/share/copy projects of completely unrelated software . So lets say you create a gitlab installation, 3 etherpad projects, 5 wekan (trello clone) boards and then share them with your team/client/family by just adding their email adresses - awesome tool!

View on HN

Sandstorm is also an extremely security-oriented way of running packaged apps. It uses an advanced sandbox that has defeated many kernel zero-day vulnerabilities. It utilizes the Cap'n Proto serialization + RPC protocol, another security-oriented project of Kenton.

Security is critical for a platform for self-hosted apps. One vulnerable or malicious app shouldn't be able to compromise your entire platform. Docker-based solutions don't provide this.

Was somewhat disappointed it wasn't a 2020 version of the Darude song, but this is nice as well.

"Single Sing On" sounds very close to what you want.

I see what you did there

It has some of the best orchestration out there.