Comment

Comment by amiircoal

Im currently looking for a Linux distribution to run in an immutable VM on macOS. It will only be used to run a web browser. A browser is the primary way your machine can get compromised.

Since it is immutable, restarting the VM will clear all files back to a clean slate.

macOS has app sandboxing built-in, but it is not as good as a VM.

I’m curious why this isn’t a more popular setup? Running a browser in an isolated VM seems like it should be a best practice. Does anyone else run a similar setup?

parent amiircoal 4 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton