Comment Re:How does it compare to bubblewrap? (Score 1) 40
I can't imagine it's as versatile or practically useful as Bubblewrap. It's based on limiting syscalls rather than namespaces, and too many processes are going to need access to too many for this approach to make sense. It makes sense when developers opt in, but not as a wrapper like the approach being tried here.