home.social

#youki — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #youki, aggregated by home.social.

  1. @jannic if you want to convince me, checkout gitlab.exherbo.org/sydbox/sydb and try to compile syd-oci as static. You need to pass --features oci to cargo build. This does not work because #youki uses proc-macros unlike #sydbox core code which is free of proc-macros.

  2. @jannic if you want to convince me, checkout gitlab.exherbo.org/sydbox/sydb and try to compile syd-oci as static. You need to pass --features oci to cargo build. This does not work because #youki uses proc-macros unlike #sydbox core code which is free of proc-macros.

  3. @jannic if you want to convince me, checkout gitlab.exherbo.org/sydbox/sydb and try to compile syd-oci as static. You need to pass --features oci to cargo build. This does not work because #youki uses proc-macros unlike #sydbox core code which is free of proc-macros.

  4. @jannic if you want to convince me, checkout gitlab.exherbo.org/sydbox/sydb and try to compile syd-oci as static. You need to pass --features oci to cargo build. This does not work because #youki uses proc-macros unlike #sydbox core code which is free of proc-macros.

  5. @jannic if you want to convince me, checkout gitlab.exherbo.org/sydbox/sydb and try to compile syd-oci as static. You need to pass --features oci to cargo build. This does not work because #youki uses proc-macros unlike #sydbox core code which is free of proc-macros.

  6. Не runc’ом единым: интересные среды запуска контейнеров

    Существует множество сред для запуска контейнеров; среди распространенных можно выделить runc и kata. Мы в

    habr.com/ru/companies/beeline_

    #beeline_cloud #контейнеризация #youki #urunc #ocre #quark #kuasar #incus

  7. Не runc’ом единым: интересные среды запуска контейнеров

    Существует множество сред для запуска контейнеров; среди распространенных можно выделить runc и kata. Мы в

    habr.com/ru/companies/beeline_

    #beeline_cloud #контейнеризация #youki #urunc #ocre #quark #kuasar #incus

  8. Не runc’ом единым: интересные среды запуска контейнеров

    Существует множество сред для запуска контейнеров; среди распространенных можно выделить runc и kata. Мы в

    habr.com/ru/companies/beeline_

    #beeline_cloud #контейнеризация #youki #urunc #ocre #quark #kuasar #incus

  9. Не runc’ом единым: интересные среды запуска контейнеров

    Существует множество сред для запуска контейнеров; среди распространенных можно выделить runc и kata. Мы в

    habr.com/ru/companies/beeline_

    #beeline_cloud #контейнеризация #youki #urunc #ocre #quark #kuasar #incus

  10. All three breakouts feature procfs writes. #sydbox has hardened procfs and devfs, man.exherbo.org/syd.7.html#Har
    which prevents such breaks. However wrt. syd-oci, the vulnerable code is within the container init done by #youki.

  11. All three breakouts feature procfs writes. #sydbox has hardened procfs and devfs, man.exherbo.org/syd.7.html#Har
    which prevents such breaks. However wrt. syd-oci, the vulnerable code is within the container init done by #youki.

  12. All three breakouts feature procfs writes. #sydbox has hardened procfs and devfs, man.exherbo.org/syd.7.html#Har
    which prevents such breaks. However wrt. syd-oci, the vulnerable code is within the container init done by #youki.

  13. All three breakouts feature procfs writes. #sydbox has hardened procfs and devfs, man.exherbo.org/syd.7.html#Har
    which prevents such breaks. However wrt. syd-oci, the vulnerable code is within the container init done by #youki.

  14. Symlinks strike again! This time with 3 #container breakouts in #runc. Other runtimes including #youki and #crun are also affected. #sydbox' syd-oci is also affected which is based on #youki. Expect updates soon: openwall.com/lists/oss-securit #exherbo #linux #security #podman

  15. Symlinks strike again! This time with 3 #container breakouts in #runc. Other runtimes including #youki and #crun are also affected. #sydbox' syd-oci is also affected which is based on #youki. Expect updates soon: openwall.com/lists/oss-securit #exherbo #linux #security #podman

  16. Symlinks strike again! This time with 3 #container breakouts in #runc. Other runtimes including #youki and #crun are also affected. #sydbox' syd-oci is also affected which is based on #youki. Expect updates soon: openwall.com/lists/oss-securit #exherbo #linux #security #podman

  17. Symlinks strike again! This time with 3 #container breakouts in #runc. Other runtimes including #youki and #crun are also affected. #sydbox' syd-oci is also affected which is based on #youki. Expect updates soon: openwall.com/lists/oss-securit #exherbo #linux #security #podman

  18. Announcing #sydbox 3.20.0 which includes Crypt Sandboxing for transparent #AES-CTR file #encryption and Ghost Mode for enhanced confinement like #Seccomp Level 1. Fixes include proper read-write open sandboxing and #youki updates which fix #podman exec for syd-oci. New utilities: syd-key for AES-CTR keygen, syd-cp for efficient file copying, and syd-aes for {en,de}cryption. #sydbox is a rock-solid user-space #kernel to #sandbox apps on #Linux >=5.19 written in #rustlang: is.gd/2tczYu

  19. Announcing #sydbox 3.20.0 which includes Crypt Sandboxing for transparent #AES-CTR file #encryption and Ghost Mode for enhanced confinement like #Seccomp Level 1. Fixes include proper read-write open sandboxing and #youki updates which fix #podman exec for syd-oci. New utilities: syd-key for AES-CTR keygen, syd-cp for efficient file copying, and syd-aes for {en,de}cryption. #sydbox is a rock-solid user-space #kernel to #sandbox apps on #Linux >=5.19 written in #rustlang: is.gd/2tczYu

  20. Announcing #sydbox 3.20.0 which includes Crypt Sandboxing for transparent #AES-CTR file #encryption and Ghost Mode for enhanced confinement like #Seccomp Level 1. Fixes include proper read-write open sandboxing and #youki updates which fix #podman exec for syd-oci. New utilities: syd-key for AES-CTR keygen, syd-cp for efficient file copying, and syd-aes for {en,de}cryption. #sydbox is a rock-solid user-space #kernel to #sandbox apps on #Linux >=5.19 written in #rustlang: is.gd/2tczYu

  21. With version 3.18.0 released today, #sydbox joins the family of #OCI container runtimes! The new syd-oci utility is largely based on #youki and provides a thin layer between the Syd #sandbox and #containers. It supports all the common commands and is compatible with both #Docker and #Podman. #sydbox is a rock-solid user-space #kernel to #sandbox apps on #Linux >=5.19 written in #rustlang. Read more about syd-oci here: man.exherbolinux.org/syd-oci.1

  22. With version 3.18.0 released today, #sydbox joins the family of #OCI container runtimes! The new syd-oci utility is largely based on #youki and provides a thin layer between the Syd #sandbox and #containers. It supports all the common commands and is compatible with both #Docker and #Podman. #sydbox is a rock-solid user-space #kernel to #sandbox apps on #Linux >=5.19 written in #rustlang. Read more about syd-oci here: man.exherbolinux.org/syd-oci.1

  23. With version 3.18.0 released today, #sydbox joins the family of #OCI container runtimes! The new syd-oci utility is largely based on #youki and provides a thin layer between the Syd #sandbox and #containers. It supports all the common commands and is compatible with both #Docker and #Podman. #sydbox is a rock-solid user-space #kernel to #sandbox apps on #Linux >=5.19 written in #rustlang. Read more about syd-oci here: man.exherbolinux.org/syd-oci.1

  24. With version 3.18.0 released today, #sydbox joins the family of #OCI container runtimes! The new syd-oci utility is largely based on #youki and provides a thin layer between the Syd #sandbox and #containers. It supports all the common commands and is compatible with both #Docker and #Podman. #sydbox is a rock-solid user-space #kernel to #sandbox apps on #Linux >=5.19 written in #rustlang. Read more about syd-oci here: man.exherbolinux.org/syd-oci.1

  25. With version 3.18.0 released today, #sydbox joins the family of #OCI container runtimes! The new syd-oci utility is largely based on #youki and provides a thin layer between the Syd #sandbox and #containers. It supports all the common commands and is compatible with both #Docker and #Podman. #sydbox is a rock-solid user-space #kernel to #sandbox apps on #Linux >=5.19 written in #rustlang. Read more about syd-oci here: man.exherbolinux.org/syd-oci.1