slpnix on Nostr: While it isn’t a well known feature, you can easily run a container inside a VM for ...

While it isn’t a well known feature, you can easily run a container inside a VM for additional isolation in #podman, simply by adding “—runtime=krun” to the command line.

This requires crun to be built with libkrun support and having a symbolic link from “krun” to “crun”. On #fedora #linux both of these can be achieved by installing the “crun-krun” package.

https://github.com/containers/crun/blob/main/krun.1