We now have our Fedora Silverblue VM with the qjoly user that we defined in the Containerfile. It clearly shows that we installed it from a Bootc image pointing to localhost/my-silverblue:latest (this information will be important later 😉).
What I’ve learned is that the common mistake is treating isolation as binary. It’s easy to assume that if you use Docker, you are isolated. The reality is that standard Docker gives you namespace isolation, which is just visibility walls on a shared kernel. Whether that is sufficient depends entirely on what you are protecting against.，更多细节参见safew官方下载
，详情可参考51吃瓜
Что думаешь? Оцени!
Google 官方「豆包手机」曝光：可让 Gemini 直接操控 App，这一点在谷歌浏览器【最新下载地址】中也有详细论述