4 ms·
> Docker does solve those problems ...with a very computationally expensive solution, and without improving other aspects like security. A systemd unit on a "
by eeZah7Ux 9y ago
> Docker does solve those problems
...with a very computationally expensive solution, and without improving other aspects like security.
A systemd unit on a "chroot" can do the same and provide isolation.
- floatboth 9y agoIs it really computationally expensive? Containers/jails/zones are essentially chroots "on steroids", isolating things other than the filesystem (networking, hostname, process IDs, users, etc.)
- 0xCMP 9y agoOnce built a docker container is not expensive, but the idea with Docker is to create immutable, layered containers and rebuilding every time there is a change. Unlike with nodejs, it's harder to volume mount python packages installed in the docker container and so no one does it. Change in requirements means rebuilding the container which is a very computationally and IO expensive process. So if you can get away with it virtualenv is better, but putting everything in a container so you can simply ship a container is also useful. It's a compromise.
- icebraining 9y agoRebuilding the container shouldn't be expensive, that's what layers are for.
- 0xCMP 9y agoA layer with your pip requirements being added and then installed is the most expensive part of building a python container so if you change your requirements you invalidate the cache for that layer (and possibly the other layers above).