Litterbox: Somewhat Isolated Development Environments
summary
Litterbox provides somewhat isolated development environments by running full editors and tools inside unprivileged containers (Podman) while keeping SSH keys outside the container and performing SSH signing via socket to prompt approvals; it’s written in Rust, uses Landlock LSM integration for stronger filesystem restrictions, supports Wayland graphics and multiple sessions, and reuses the same container images in CI/CD (GitHub Actions). Network isolation is basic (namespaces only), kernel exploits remain a risk, and the author uses it daily.
AI-written summary · about
chapters (9)
- 0:00Introduction to somewhat isolated development environments
- 3:52Why existing solutions failed
- 7:21Introducing Litterbox
- 8:03Demo of Litterbox
- 9:50Litterbox architecture
- 13:18Security limits & known issues
- 15:44Daily use & advanced features
- 17:07Call for contributors
- 18:57Q&A
related talks
24mWrite your own container, for fun and no profit!
30mToolbox - interactive container environment
50mInstant Self-contained Development Environments for Everyone
23mA Deep Dive into Development Environment Configuration Standards
50mInstant Self-contained Development Environments for Everyone
25mContainer Development Client for Reproducible Artifacts
32mDeveloping on Containers with Dev Containers
20mRust-based, Secure and Lightweight Container Runtime for Embedded Systems