6 ms·

Fugly? Compared to what alternatives? The offerings from Microsoft are even fuglier.

by zxcvcxz 10y ago

voidz 10y ago
FreeBSD jails, I would think.
- zxcvcxz 10y ago
  But do enterprise companies use FreeBSD jails regularly? AFAIK they're basically used as toys by developers.
  - 2trill2spill 10y ago
    Jails are used on the Playstation 4 and with some 36 Million PS4s sold so far that's a huge use of jails in production. Here's a quote from an article talking about it, "We can prove the existence of FreeBSD jails being actively used in the PS4's kernel through the auditon system call being impossible to execute within a jailed environment" This quote is from: https://cturt.github.io/ps4.html https://cturt.github.io/ps4.html
    - educar 10y ago
      It's obvious that your parent was talking about servers in production. Isn't this entire thread about that?
- Scramblejams 10y ago
  Unless I've missed something (and I may have!), FreeBSD's jails have a very respectable security track record. Really, really want to make use of them. I can't give up Debian's package system, though, so I'm left hoping that kFreeBSD will amount to something someday and I use Xen or KVM in the meantime... :-(
  - Freaky 10y ago
    > I can't give up Debian's package system, though Why not? What would you miss from it?
    - voltagex_ 10y ago
      I run Debian Testing and FreeBSD 10. I haven't found too much from Debian that I can't get in FreeBSD 10. I could even run a Debian/kFreeBSD jail if I really wanted to. What really does my head in is that a default Debian install can pull down 2 megabytes a second from a server over SFTP, and a default FreeBSD 10 server can only do ~800 kilobytes per second (FreeBSD 9 was worse).
      - Freaky 10y ago
        > What really does my head in is that a default Debian install can pull down 2 megabytes a second from a server over SFTP, and a default FreeBSD 10 server can only do ~800 kilobytes per second Shouldn't be that much of a difference. You might try OpenSSH from ports, maybe the HPN patches will help if you're on a high latency connection.
    - deleted 10y ago
      [deleted]
- subway 10y ago
  See also: Solaris zones.
  - hinkley 10y ago
    Yeah when that giant Oracle boat finally turns we are all in for it.
    - cyphar 10y ago
      illumos Zones then.
jclulow 10y ago
In illumos, a descendant of (Open)Solaris, we have a first class container primitive called "zones". In SmartOS, the Joyent-backed distribution of illumos, we also have support for running an entire Linux userland (e.g. Ubuntu or CentOS) in this substrate. You can have the best of both worlds: a secure container substrate, designed from the ground up as a coherent whole like Jails; and the vast packaging ecosystem provided by Ubuntu.

Fugly? Compared to what alternatives? The offerings from Microsoft are even fuglier.

by zxcvcxz 10y ago

Fugly? Compared to what alternatives? The offerings from Microsoft are even fuglier.

voidz 10y ago

FreeBSD jails, I would think.

zxcvcxz 10y ago
But do enterprise companies use FreeBSD jails regularly? AFAIK they're basically used as toys by developers.
- 2trill2spill 10y ago
  Jails are used on the Playstation 4 and with some 36 Million PS4s sold so far that's a huge use of jails in production. Here's a quote from an article talking about it, "We can prove the existence of FreeBSD jails being actively used in the PS4's kernel through the auditon system call being impossible to execute within a jailed environment" This quote is from: https://cturt.github.io/ps4.html https://cturt.github.io/ps4.html
  - educar 10y ago
    It's obvious that your parent was talking about servers in production. Isn't this entire thread about that?
Scramblejams 10y ago
Unless I've missed something (and I may have!), FreeBSD's jails have a very respectable security track record. Really, really want to make use of them. I can't give up Debian's package system, though, so I'm left hoping that kFreeBSD will amount to something someday and I use Xen or KVM in the meantime... :-(
- Freaky 10y ago
  > I can't give up Debian's package system, though Why not? What would you miss from it?
  - voltagex_ 10y ago
    I run Debian Testing and FreeBSD 10. I haven't found too much from Debian that I can't get in FreeBSD 10. I could even run a Debian/kFreeBSD jail if I really wanted to. What really does my head in is that a default Debian install can pull down 2 megabytes a second from a server over SFTP, and a default FreeBSD 10 server can only do ~800 kilobytes per second (FreeBSD 9 was worse).
    - Freaky 10y ago
      > What really does my head in is that a default Debian install can pull down 2 megabytes a second from a server over SFTP, and a default FreeBSD 10 server can only do ~800 kilobytes per second Shouldn't be that much of a difference. You might try OpenSSH from ports, maybe the HPN patches will help if you're on a high latency connection.
  - deleted 10y ago
    [deleted]
subway 10y ago
See also: Solaris zones.
- hinkley 10y ago
  Yeah when that giant Oracle boat finally turns we are all in for it.
  - cyphar 10y ago
    illumos Zones then.

jclulow 10y ago

In illumos, a descendant of (Open)Solaris, we have a first class container primitive called "zones". In SmartOS, the Joyent-backed distribution of illumos, we also have support for running an entire Linux userland (e.g. Ubuntu or CentOS) in this substrate. You can have the best of both worlds: a secure container substrate, designed from the ground up as a coherent whole like Jails; and the vast packaging ecosystem provided by Ubuntu.