Show HN: Self-improving sandboxed agent with memory and scheduling(github.com)
github.com
Show HN: Self-improving sandboxed agent with memory and scheduling
https://github.com/Grimm67123/GrimmBot
2 comments
How does this compare to just using systemd's sandboxing? ProtectSystem=strict, PrivateDevices, RestrictNamespaces etc. give you a pretty solid sandbox for any long-running daemon without extra tooling. Genuine question — I've been relying on systemd hardening for my own projects and wondering what I'm missing.
Isn't that Linux only?