4 ms·

I think that the important feature of containers is that they are running from image containing the application. Zones, jails, and VMs are other isolation mecha

I think that the important feature of containers is that they are running from image containing the application. Zones, jails, and VMs are other isolation mechanisms that could be used to run containers. Running an application image unpacked into VM would be container. One place where the difference in namespace is visible is with Kubernetes pods. Containers running in pod share network and volumes namespaces.

mrunalp 10y ago
The kubernetes pods share ipc and network namespaces (and pid soon). You may be referring to mount namespace by volumes namespace. The mount namespace is the minimum that distinguishes one container from the other as that's the mean by which they see different file-system hierarchies created from their images. k8s volumes are bind mounted into the containers in a pod.
- ianburrell 10y ago
  I wasn't sure if pods shared mount namespace or just the external volumes. It sounds like the same external volumes are mounted in each container but the rest of mounts are different.
lloydde 10y ago
Your definitions are not the common ones. Dropping the Linux from the full name Linux Containers doesn't make it a different fundamental. Containers, Zones and Jails are all OS layer virtualisation :https://en.m.wikipedia.org/wiki/Operating-system-level_virtualization https://en.m.wikipedia.org/wiki/Operating-system-level_virtu... . The style of application packaging that came with Docker compliments OS virt but the prior art demonstrates that it is its own innovation. "Docker will do to apt what apt did to tar" @bcantril
- ianburrell 10y ago
  There are Windows Server containers. Docker runs on FreeBSD using jails and Solaris using zones. Hyper runs containers on hypervisors and RancherVM on KVM. Container now has two meanings: the isolated application, and the container-based virtualization on Linux. The latter is the original usage (LXC is older than Docker). But the important innovation of Docker is combining containers with image distribution. The isolated application is more general then virtual machine so the concept is extended to other virtualization techniques.
deleted 10y ago
[deleted]

mrunalp 10y ago

The kubernetes pods share ipc and network namespaces (and pid soon). You may be referring to mount namespace by volumes namespace. The mount namespace is the minimum that distinguishes one container from the other as that's the mean by which they see different file-system hierarchies created from their images. k8s volumes are bind mounted into the containers in a pod.

ianburrell 10y ago
I wasn't sure if pods shared mount namespace or just the external volumes. It sounds like the same external volumes are mounted in each container but the rest of mounts are different.

lloydde 10y ago

Your definitions are not the common ones. Dropping the Linux from the full name Linux Containers doesn't make it a different fundamental. Containers, Zones and Jails are all OS layer virtualisation :https://en.m.wikipedia.org/wiki/Operating-system-level_virtualization https://en.m.wikipedia.org/wiki/Operating-system-level_virtu... . The style of application packaging that came with Docker compliments OS virt but the prior art demonstrates that it is its own innovation. "Docker will do to apt what apt did to tar" @bcantril

ianburrell 10y ago
There are Windows Server containers. Docker runs on FreeBSD using jails and Solaris using zones. Hyper runs containers on hypervisors and RancherVM on KVM. Container now has two meanings: the isolated application, and the container-based virtualization on Linux. The latter is the original usage (LXC is older than Docker). But the important innovation of Docker is combining containers with image distribution. The isolated application is more general then virtual machine so the concept is extended to other virtualization techniques.

deleted 10y ago

[deleted]