> Separation of the core OS from the services it is running is the key to keeping a hygienic separation between components sharing the same file system. I try

> Separation of the core OS from the services it is running is the key to keeping a hygienic separation between components sharing the same file system. I try to achieve this goal on my linux servers with containers, more precisely at the namespaces separation level which gives the ability to mount a set of config files inside the service's container. The other advantage is that versioning a service configuration becomes easy, allowing both clean undo/redo strategies and remote backup. I'm pretty lazy so I'm using docker, but really the gist is around mounting config files for a segregated service process.