4 ms·
> it uses a Git-like distribution system that's specifically built for operating system size snapshots. You get to pick your underlying distribution (or roll y
by daveguy 10y ago
> it uses a Git-like distribution system that's specifically built for operating system size snapshots. You get to pick your underlying distribution (or roll your own) and the sandboxing mechanism just wraps around secomp-bfp so it stacks well with SELinux or AppArmor or whatever.
Is security compatibility the primary advantage over docker? When I see these I always think, why not docker? Git like distribution, pick underlying / roll your own. I'm not sure why these are better than a docker or rkt.
- gjjrfcbugxbhf 10y agoDocker doesn't work for desktop gui apps. Also it doesn't provide great security sandboxing. Also docker is not the first containerisation solution why not LXC?
- fulafel 10y agoIt works for GUI apps, see eg. https://hub.docker.com/r/tomparys/skype/ https://hub.docker.com/r/tomparys/skype/
- satai 10y agoX11 only, no Wayland :-/
- gjjrfcbugxbhf 10y agoOK but now you've forwarded your x you're not really containing the gui app very strongly anymore.
- fulafel 10y agoDocker doesn't support user namespaces properly so this is the situation anyway. Good reason to use LXD - or to run Docker under LXD[1] :) [1] https://insights.ubuntu.com/2016/04/13/stephane-graber-lxd-2-0-docker-in-lxd-712/ https://insights.ubuntu.com/2016/04/13/stephane-graber-lxd-2...
- OJFord 10y agoIt was far too laggy for real use when I tried with Firefox a couple of months ago. That might be XQuartz's fault rather than Docker's - I only tried on macOS.
- daveguy 10y ago> why not LXC The git-like version control available with docker or rkt (and apparently these package manager based systems too).