Sandboxing a Linux process usually means spending a lot of effort deciding what it isn’t allowed to see. You might put it in ...
I found a simpler way to run self-hosted services at scale.