ArticleWikipedia-AutorenResource
chroot laid the groundwork for containerisation, yet it is frequently misjudged as a comprehensive security sandbox. Understanding its boundaries helps DevOps engineers and system administrators avoid misconfigurations and select suitable containment mechanisms.
The article demonstrates the distinct difference between filesystem segregation and true OS-level isolation. While chroot remains a functional utility for distribution build farms, recovery disks, and unprivileged daemon helper separation, it requires privileged execution to initiate and offers no defence against privileged escape attempts. Functional setups on modern Linux also demand manual mounts of pseudo-filesystems (/proc, /sys), highlighting why complete container runtimes evolved from this foundation.
Summary generated by AI (Gemini 3.8 Flash, 27 September 2026). It may contain errors – the original source is authoritative.
Similar in content, found by the AI search.
Article:Wikipedia-Autoren
LXC provides operating system-level virtualisation on Linux by running multiple isolated systems on a single shared kernel. It combines kernel cgroups and namespaces to isolate processes and enforce resource limits.
Article:Wikipedia contributors
Control groups (cgroups) are a Linux kernel feature that limits, accounts for, and isolates the resource usage—such as CPU, memory, and disk I/O—of process collections.
Repository:anthropics/sandbox-runtime
Anthropic's Sandbox Runtime (srt) is an open-source tool designed to enforce OS-level filesystem and network restrictions on arbitrary processes. Developed as a safety component for Claude Code, it isolates AI agents, MCP servers, and shell commands without requiring containerisation.
5.1kstarsTypeScript
Repository:containers/bubblewrap
Bubblewrap is a C-based low-level tool that lets unprivileged Linux users create isolated sandboxes using kernel user namespaces.
8.6kstarsC
Article:Anthropic Engineering
Anthropic outlines its containment architecture designed to cap the blast radius of autonomous AI agents across claude.ai and Claude Code. As human oversight falters due to approval fatigue, security relies primarily on deterministic OS and container sandboxes.
Repository:microsoft/mxc
Microsoft eXecution Container (MXC) is a cross-platform sandboxed code execution framework designed for running untrusted workloads such as AI model output, plugins, and tools across Windows, Linux, and macOS. It wraps native OS containment mechanisms and VMs into a unified policy engine and typed SDKs.
1.8kstarsRust
Parts of this content were created with the assistance of AI.
