Cells for NetBSD: Kernel-Enforced Isolation System with Practical Operations
By
akagusu
Hot, fresh, and worth queueing round the block for.
Summary
Cells for NetBSD is a kernel-enforced isolation system for the NetBSD operating system that provides jail-like containerization with practical, operator-friendly features. The implementation includes secmodel_cell for kernel-level enforcement, celladm for user-space management, and supervised service execution with snapshot telemetry. The system focuses on balancing security policy enforcement with observability and daily operational needs, offering a NetBSD-native alternative to Linux container solutions.
Key quotes
· 3 pulledCells for NetBSD focuses on practical, operator-friendly isolation with a balanced emphasis on policy, observability, and daily operations.
The implementation is built around the following components:
Cells for NetBSD is a maturing NetBSD-native isolation stack with kernel-enforced boundaries, supervised service execution, and snapshot telemetry for practical host-side operations.
You might also wanna read
ReactOS Achieves Experimental ARM64 Support, Boots on Apple Silicon via QEMU
ReactOS, the open-source project aiming for binary compatibility with Microsoft Windows, has achieved experimental support for running on 64
phoronix.com·5d ago
Understanding the Linux TTY Subsystem: History, Architecture, and Implementation
A comprehensive technical deep-dive into the TTY (teletype) subsystem in Linux and UNIX systems. The article traces the historical origins o
linusakesson.net·12d ago
Progress on Haiku arm64 Port: Running Stably in QEMU, Targeting M1 MacBook Air
A developer is working on improving the arm64 port of Haiku, an open-source operating system, with the goal of eventually running it on an M
discuss.haiku-os.org·13d ago
Haiku Project Releases Nightly Builds and April 2026 Activity Report
The Haiku Project provides nightly builds of its open-source operating system for testing purposes, offering bleeding-edge versions with the
haiku-os.org·18d ago
Reefy: A Lightweight OS That Turns Any PC Into a Private AI Server
Reefy is a lightweight operating system that transforms any PC, laptop, mini PC, or GPU box into a private AI server with minimal setup. Use
Product Hunt·24d ago
systemd-manager-tui: A Terminal-Based Tool for Managing systemd Services
A TUI (Terminal User Interface) application called systemd-manager-tui, available on GitHub, allows users to manage systemd services via D-B
github.com·28d ago