search

humlab-speech / visible-speech-deployment

3 stars 2 forks source link

Consider further Docker isolation using e.g. gVisor #199

Closed TomasSkotare closed 1 month ago

TomasSkotare commented 7 months ago

This is likely to enable us improved resolution when it comes to network and file level access, for example to ensure that no calls are possible to the local network without our oversight.

GitHub link

TomasSkotare commented 1 month ago

We have come to the realization that we will rather change to Rootless Podman for security purposes, and thus this may not be applicable anymore - however, to seome degree it still stands and can be considered in the future.