3 ms·
Not everything runs great on containers. My internal firewall is a pfSense, BSD based which doesn't run on a linux kernel. Atleast 3 VMs need patched kernels o
by zaarn 8y ago
Not everything runs great on containers. My internal firewall is a pfSense, BSD based which doesn't run on a linux kernel.
Atleast 3 VMs need patched kernels or more recent kernels/regular kernel updates than the host provides.
Additionally VMs provide a bit more isolation than a simple container (atleast unless you do unpriv'd container).
I do have containers too, about 20 of them, half of them unpriv'd, all of them LXC. Docker is not suitable for my use case at all and frankly I don't think you should suggest someone should switch to Docker without knowing their use cases.