4 ms·
Why don't people run containers in VM's? I don't get it, the only real selling point I can come up with for kernel level isolation is ability to over provision
by nullwasamistake 7y ago
Why don't people run containers in VM's? I don't get it, the only real selling point I can come up with for kernel level isolation is ability to over provision ram. And you shouldn't do that on a server anyways.
It's perfectly possible to fire up a regular docker container inside KVM or whatever. With constant container security issues, why isn't this the norm?
- hclaria 7y agothat's what Intel Clear Containers and KataContainers are trying to do https://clearlinux.org/news-blogs/intel-clear-containers-now-part-kata-containers https://clearlinux.org/news-blogs/intel-clear-containers-now... https://katacontainers.io/ https://katacontainers.io/
- qalmakka 7y agoAnd also what Microsoft has been doing since a few years ago on Windows with Hyper-V isolation.
- Tepix 7y agoKVM requires more resources than LXC (Linux containers).
- the8472 7y agoYou have more benefits such as sharing resources between containers (page cache, unix sockets, reflink copies, shared memory IPC) etc. Exposing GPU resources is also a lot easier with containers than with VMs.