Eclipse Enclave does exactly that: There is an outbound firewall and secret inje... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

SegmentTree 30 days ago | parent | context | favorite | on: Docker Sandboxes – Disposable, isolated sandboxes ...

Eclipse Enclave does exactly that: There is an outbound firewall and secret injections, so that the agent never sees a real key. And it's fully open source: https://github.com/eclipse-enclave/enclave

dvtkrlbs 30 days ago [–]

Looking at the Readme it seems like it only supports docker. Which is a dealbreaker for some

collabs 30 days ago | [–]

What is missing in qemu + podman that we need rootful docker for this? Is there actual capability that is missing or is it more of a design choice by the eclipse enclave folks?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact