Skip to content

Commit 7cb7158

Browse files
authored
doc(README): english
1 parent fc22faa commit 7cb7158

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ Diamond will:
1010
* Mount the image in `/var/apps/foo` and clone the source there
1111
* Create a SystemD service file with CPU/RAM limitations in `/etc/systemd/system/foo.service`
1212

13-
Since the service will have it's own unprivileged Linux user, it's possible to limit damage caused if that specific service is compromised. The reason for the creation of the disk image is simple -- if the service allows saving arbitrary files to disk, it should not be possible for it to be able to fill the host disk to the brim and crash the system. It also has a positive side-effect of making the service and it's files more portable.
13+
Since the service will have it's own unprivileged Linux user, it's possible to limit damage caused if that specific service is compromised. The reason for the creation of the disk image is simple -- if the service allows saving arbitrary files to disk, it should not be possible for the service to fill the host disk to the brim and crash the system; it also has a positive side-effect of making the service and it's files more portable.
1414

1515
Diamond also allows you to automatically mount all the disk images and start all the services automatically this way:
1616
```bash

0 commit comments

Comments
 (0)