3 ms·
LXC was only introduced in 2007. I wouldn't call ZFS a good comparison as I would also still consider it rather young in terms of basic unix technologies—depend
by monadic2 7y ago
LXC was only introduced in 2007. I wouldn't call ZFS a good comparison as I would also still consider it rather young in terms of basic unix technologies—depending on your needs, you could easily use some other simpler but older (and likely less buggier) software.
With respect to cgroups versus lxc specifically, I don't think the approach is well suited for security reasons—the surface area for bugs and vulnerabilities is much larger than with the jails approach.
- viraptor 7y ago> the surface area for bugs and vulnerabilities is much larger than with the jails approach It would be great if someone wrote an article with technical details about it. I see this repeated very often, but if you actually go looking for details... it's hard to find any justification.
- monadic2 7y agoI can’t say I have a decent justification off hand myself—this was the impression I had when digging through a comparison of the two softwares about a year back. Cgroups appears to have a much more detail laden implementation, but this could be explained away with my lack of Linux internals.