3 ms·
Well that just says nothing, it's not a sign for security or quality nor against it. I run around 600 jails (so obviously no systemd (FreeBSD)), but the host f
by nix23 5y ago
Well that just says nothing, it's not a sign for security or quality nor against it.
I run around 600 jails (so obviously no systemd (FreeBSD)), but the host for sure has pretty tight MAC policies (and some jails too).
What other MAC-System do you use? tomoyo? apparmor?
- pkrumins 5y agoI have to complement your choice of FreeBSD and jails. If I didn’t have a Linux stack, I’d run FreeBSD and jails, too. I wrote my own kernel modules that do exactly what I need in my stack and use case. No need for complicated SELinux, AppArmor or other solutions. I always roll my own solutions from the ground up (usually in a couple of all-nighters).
- nix23 5y agoI needed around 5 years to slowly move away from Linux, open/-solaris/omnios/smartos was also in my mind, but...well you probably know the sad story behind it. But FreeBSD really kicks, from firewall to database all the way down, everything FreeBSD ;)
- pkrumins 5y agoYes, I know the story. But what about Illumos?
- nix23 5y ago>Illumos Well illumos is just the kernel and userland (bit like BSD without ports/packets), Omnios is a really clean "server-distribution" with illumos at it's core but well same problem, not enough eye's and hand's (aka packets, documentation etc). I decided, that FreeBSD is the "more worry-free" solution for me...and still happy.