8 ms·

Maybe relevant: "Setting the Record Straight: containers vs. Zones vs. Jails vs. VMs" https://blog.jessfraz.com/post/containers-zones-jails-vms/ https://blog.j

• jsiepkes 9y ago
  True, and that very long post basically says with many words: "Yes, Linux namespace (docker) isn't as secure as FreeBSD jails or Solaris Zones but security is not the problem docker solves. Docker solves a deployment problem, not a security problem."
  • gvb 9y ago
    Comparing containers (a concept) with VM/jails/zones is a non-sequitur. To quote: A “container” is just a term people use to describe a combination of Linux namespaces and cgroups. Linux namespaces and cgroups ARE first class objects. NOT containers. [...] VMs, Jails, and Zones are if you bought the legos already put together AND glued. So it’s basically the Death Star and you don’t have to do any work you get it pre-assembled out of the box. You can’t even take it apart. Containers come with just the pieces so while the box says to build the Death Star, you are not tied to that. You can build two boats connected by a flipping ocean and no one is going to stop you. Docker is a bunch of boxes floating on a flipping ocean[1]. They could have made a deathstar, but they chose not to. [1] https://www.google.com/search?q=docker+logo https://www.google.com/search?q=docker+logo
  • KGIII 9y ago
    Can't you just run docker in something like firejail?