3 ms·

AFAIK, Podman still uses cgroups to separate the containers. Fly uses Firecracker to separate containers. Those are two quite different methods and AFAICT Fly

by cpach 6y ago

AFAIK, Podman still uses cgroups to separate the containers. Fly uses Firecracker to separate containers. Those are two quite different methods and AFAICT Fly uses Firecracker because of the stronger security model of that solution.