Sabitlenmiş Tweet

new project announcement: sigil and ofc using rust
(also a kind of learning project for me)
it's basically just a low level tool that runs a linux process in a private and restricted environment. instead of using some massive platform like docker, it just talks straight to the linux kernel to set rules for what that process can see or how much memory it can eat.
here is what it actually does:
- creates the process: uses raw kernel commands like clone to start it.
- jails it: uses things like pivot_root and namespaces so the process can't see your actual files or other running apps.
- sets limits: tells the kernel exactly how much cpu and ram the process is allowed to touch using cgroups.
- watches it: sigil stays alive as a supervisor to forward signals and make sure everything is cleaned up once the process finishes or crashes.
basically no fluff and just raw systems programming and imma post regular updates about this.

English





















