![](/static/253f0d9b/assets/icons/icon-96x96.png)
![](https://lemmy.ml/pictrs/image/q98XK4sKtw.png)
2·
11 months agoI think it should be possible to use bwrap to sandbox programs.
I think it should be possible to use bwrap to sandbox programs.
Even when using home manager or any other dotfile manager your $HOME folder is still filled with junk. It maybe in your controlled repo but it still ends up as symlink to that repo.
I have :q to exit too since i was trying to exit shell with :q. I guess (n)vim users cant exit their shells :)
Nix packages arent containerized by default. But since every depenedency is clearly defined. there are tools wrap packkages using bublewrap, or tools build layered docker imahes
But building packages happens in sandbox