We’re launching Lyria 3.5 in Google Flow Music, with advances across musicality, lyrics, vocals, and creative control
deepmind.google·6d ago
AI Engineering
Lobsters·Jul 2·5 min read
Creating a development sandbox with crosvm
TL;DR
Developers often face risks when coding on machines that store sensitive information, leading to potential security breaches. To mitigate these risks, a development sandbox was created using crosvm, a tool for running virtual machines.
✦ Why It Matters
Engineers can implement crosvm to create secure development environments that protect sensitive data.
Key Takeaways
- Use crosvm to create isolated development environments.
- Leverage Crostini for secure Linux installations on ChromeOS.
- Minimize risks of supply-chain attacks during development.
- Adopt verified boot and read-only OS partitions for added security.
Full Summary
Many developers are concerned about the security of their sensitive information, such as emails and passwords, while coding on their primary machines. To address this, crosvm, a tool for creating lightweight virtual machines, was utilized to establish a development sandbox.
This sandbox runs a separate Linux installation, isolating the development environment from the main operating system. The methodology involves using Crostini on ChromeOS, which allows for verified boot and a read-only OS partition, ensuring that the VM cannot interact with the main OS except through controlled means.
As a result, developers can run tests and use third-party tools with reduced risk of supply-chain attacks. This setup not only enhances security but also streamlines the development process by allowing access to terminal-based applications.
Overall, this approach provides a practical solution for developers seeking to maintain security while working on potentially risky code.