turnipjs@lemmy.ml to linuxmemes@lemmy.world · 2 年前Have you tried NixOS?lemmy.mlexternal-linkmessage-square121linkfedilinkarrow-up1834arrow-down119
arrow-up1815arrow-down1external-linkHave you tried NixOS?lemmy.mlturnipjs@lemmy.ml to linuxmemes@lemmy.world · 2 年前message-square121linkfedilink
minus-squareivnlinkfedilinkarrow-up17arrow-down1·2 年前It build in a sandbox, but it’s not run in a sandbox.
minus-squareVilian@lemmy.calinkfedilinkarrow-up2arrow-down3·2 年前I don’t understand, if you run a program inside the sandbox and the program ask for a library, the kernel need to map the library from inside the sandbox to the program, that overhead that I’m talking about
minus-squareLaser@feddit.orglinkfedilinkarrow-up21arrow-down1·2 年前This is not how NixOS works. Programs directly link against libraries in the store. There is no sandbox by default when running the binaries.
minus-squareivnlinkfedilinkarrow-up16·2 年前But it’s not run in a sandbox. I’m not sure where you get this from.
It build in a sandbox, but it’s not run in a sandbox.
I don’t understand, if you run a program inside the sandbox and the program ask for a library, the kernel need to map the library from inside the sandbox to the program, that overhead that I’m talking about
This is not how NixOS works. Programs directly link against libraries in the store. There is no sandbox by default when running the binaries.
But it’s not run in a sandbox. I’m not sure where you get this from.