3 ms·
There's a bunch of scripting around them, but the point is more around the isolation - jails are properly isolated in a way that containers are (explicitly) not
by mst 6y ago
There's a bunch of scripting around them, but the point is more around the isolation - jails are properly isolated in a way that containers are (explicitly) not designed to be.
bastille among others try to provide a nice UX atop them, but the important thing is that jails are strictly more powerful (on FreeBSD a jail can have its own network stack, while still running on the same kernel, for example)
I dunno about 'superior' but jails are very definitely different and provide a bunch of features containers don't.