2 ms·

Sockets, shared memory, or the network, just like any Linux process.

• pjmlp 4y ago
  Shared memory across containers, across isolation layers, that is a good one. The two remaining ones are worse than any micro-kernel API call in performace.
  • zamalek 4y ago
    It's explicit, just like all the other mapping/mounting options[1], and containers aren't exclusively for secure isolation anyway. Many examples exist where security isn't desirable, such as the afformentioned toolbox/distrobox. [1]: https://docs.docker.com/engine/reference/run/#ipc-settings---ipc https://docs.docker.com/engine/reference/run/#ipc-settings--...