3 ms·
As people are again asking about vm/jails/docker/... https://blog.jessfraz.com/post/containers-zones-jails-vms/ https://blog.jessfraz.com/post/containers-zones
by stiray 6y ago
As people are again asking about vm/jails/docker/...
https://blog.jessfraz.com/post/containers-zones-jails-vms/ https://blog.jessfraz.com/post/containers-zones-jails-vms/
It is great article.
Bottom line, jails are "in kernel" primitives. Containers are not (or at least they werent when I last checked).
- TsiCClawOfLight 6y agoContainers are basically a very thin layer on top of namespaces and cgroups, which are most definitely in kernel primitives. Docker adds packaging and distribution, but the hard work is in kernel.
- cpuguy83 6y agoIt's all hard work. The primitives of containerization are in the kernel, but executing and managing them, especially securely, takes a fair amount of trial and error to do it right.
- stiray 6y agoWhy is so hard to read an article from someone that is developing containers? Quote: "Again, containers were not a top level design, they are something we build from Linux primitives. Zones, Jails, and VMs are designed as top level isolation."
- heavyset_go 6y agoThe tl;dr of the post is that jails are a top-down solution whereas "containers" are just a bunch of kernel features and primitives used together.