Comment

Comment by grouchypumpkin

QubesOS was built to give sandboxes kernel isolation via a hypervisor.

It’s not surprising that most people don’t know about it, because QubesOS as a daily driver can be painful. But with some improvements, I think it’s the right way to do it.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton