3 ms·
In NixOS containers are just systemd containers with all of the default root breach problems, no?
by juskrey 8y ago
In NixOS containers are just systemd containers with all of the default root breach problems, no?
- wmf 8y agoThe author seems to be talking about NixOS without containers. If you have an all-powerful package manager you can solve dependency problems "properly" (i.e. with parallel installs of multiple versions of packages) instead of shoving everything into containers.
- Filligree 8y agoNixOS containers, or systemd services or whatever, are not intended as a security mechanism. Neither are Docker containers, they've just gotten shoehorned into the role. For security you'll need some other mechanism, but it does solve the immutability / replication problem.