Hacker News Reader

Time to sandbox all code dev. Any good recommendations on sandboxing tools. Are docker / podman really secure enough ?

apparently not. someone in the comments suggested Incus. I haven't used it myself.

Maybe a mini desktop computer hooked to a separate vlan that you nuke the disk every night at midnight?