Container for Desktops
summary
Describes isolating role-specific Firefox browser instances in LXC/Docker containers, chaining proxies or Tor and enforcing a host firewall to improve desktop privacy. Shows a demo that spawns browsers inside containers, uses LVM snapshots for quick rollback, and reports near-native performance (no VM overhead); setup takes a few days but scripted container creation plus rollback is practical, with an observed 1–2% of users disabling JavaScript.
AI-written summary · about
chapters (14)
- 0:00Secure desktop motivation
- 1:31Data loss threats
- 5:45Tor vs tracking
- 10:43Browser fingerprinting fixes
- 18:13Tracking limits
- 22:37Privacy plugins
- 28:57Containers for secure desktops
- 32:42Demo: Browser in containers
- 44:27Future: Containerized workspaces
- 47:37Summary
- 51:08IT security neglect
- 54:42Panoptikum project tests
- 56:06Containers vs virtualization
- 1:00:07Scripts release
related talks
24mThe future of the desktop is on hypervisor powered containers
42mHow to Safely "Detonate" Suspicious Content
23mNative messaging for strictly confined browsers
50mLinux Security and How Web Browser Sandboxes Really Work
31mYour Containers Aren’t Alone: Demystifying Container Isolation
15mFrancis Bouvier
14mYour Containers Aren’t Alone: Demystifying Container Isolation
38mOn the Way to Safe Containers