I tried containers for a while, but I didn't really trust the separation, and I also wanted the browser to be separated from my regular homedir/user.
So now I have a script to create/remove new UNIX users with a pre-configured firefox profile and a script to run the firefox under that user.
It has some quirks, but also some benefits. Mainly that the browser doesn't have access to all files on my computer, and the separation between profiles is enforced by the OS, which I trust more.
So now I have a script to create/remove new UNIX users with a pre-configured firefox profile and a script to run the firefox under that user.
It has some quirks, but also some benefits. Mainly that the browser doesn't have access to all files on my computer, and the separation between profiles is enforced by the OS, which I trust more.