3 ms·
jails are actually very mature if you compare them to docker. They have a well working security system and sane networking. (docker just does endless NAT abstra
by kazen44 8y ago
jails are actually very mature if you compare them to docker. They have a well working security system and sane networking. (docker just does endless NAT abstraction, which is terrible for certain use cases. Not to mention it breaks a ton of useful networking features)
- gm-conspiracy 8y agoI was asking a coworker the other day about using containers with a "shared" mapped filesystem subdirectory for UNIX file socket communication versus encapsulating everything in a TCP/IP network stack, but my coworker was concerned about the security risks of a mapped filesystem on the containers. I sometimes feel like a crazy person.