English(EN) Since a .vessel can carry code someone else wrote, isolation was the main thing I designed around. Each one runs sandboxed and can only reach the network origin

Apollo Orbit 推出安全、沙箱化的软件容器

作者 PulseAugur 编辑部 · [1 个来源] · 2026-06-21 13:47

Apollo Orbit 开发了一种名为“vessel”的新软件容器，其设计重点是隔离和安全。每个vessel都在沙箱环境中运行，并具有预先定义的受限网络访问权限。数据存储在纯SQLite文件中，便于访问和与标准SQLite工具进行互操作。 AI

排序理由该条目描述的是一款新的软件产品/工具，而非前沿发布、重大行业举措或研究论文。

在 Mastodon — fosstodon.org 阅读 →

AI 生成摘要 · Google Gemini · 来自 1 个来源。我们如何撰写摘要 →

报道来源 [1]

Mastodon — fosstodon.org TIER_1 English(EN) · [email protected] · 2026-06-21 13:47

Since a .vessel can carry code someone else wrote, isolation was the main thing I designed around. Each one runs sandboxed and can only reach the network origin

Since a .vessel can carry code someone else wrote, isolation was the main thing I designed around. Each one runs sandboxed and can only reach the network origins it declares up front. Your data stays a plain SQLite file too. Unzip a .vessel and you can open the database in any SQ…

报道来源 [1]

Since a .vessel can carry code someone else wrote, isolation was the main thing I designed around. Each one runs sandboxed and can only reach the network origin

相关实体

相关话题