Skip to content

Commit

Permalink
doc(README): english
Browse files Browse the repository at this point in the history
  • Loading branch information
uditkarode authored Mar 19, 2022
1 parent fc22faa commit 7cb7158
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ Diamond will:
* Mount the image in `/var/apps/foo` and clone the source there
* Create a SystemD service file with CPU/RAM limitations in `/etc/systemd/system/foo.service`

Since the service will have it's own unprivileged Linux user, it's possible to limit damage caused if that specific service is compromised. The reason for the creation of the disk image is simple -- if the service allows saving arbitrary files to disk, it should not be possible for it to be able to fill the host disk to the brim and crash the system. It also has a positive side-effect of making the service and it's files more portable.
Since the service will have it's own unprivileged Linux user, it's possible to limit damage caused if that specific service is compromised. The reason for the creation of the disk image is simple -- if the service allows saving arbitrary files to disk, it should not be possible for the service to fill the host disk to the brim and crash the system; it also has a positive side-effect of making the service and it's files more portable.

Diamond also allows you to automatically mount all the disk images and start all the services automatically this way:
```bash
Expand Down

0 comments on commit 7cb7158

Please sign in to comment.