3 ms·

Also long before there was "Junest" that did same thing based on chroot

• freeCandy 3y ago
  Junest is really good, although it only runs Arch
• msla 3y ago
  That seems more fragile, in that chroot isn't meant to keep things as well-contained as cgroups are.
  • blueflow 3y ago
    Namespaces do that, not cgroups.
    • PeterWhittaker 3y ago
      Containers need both namespaces and groups. While created for different purposes, both serve the same purpose within the container world: Giving processes within a container a limited set of actual host capabilities. If cgroups hadn't already existed, we likely would have a namespace that did the same thing; as it is, we had cgroups, so we didn't that namespace.
      • blueflow 3y ago
        This similarity is constructed. Namespacing is largely about entry points into kernel data structures, while cgroups are a form of active accounting. They are orthogonal, and the existence of the cgroups namespace (=the intersection of both) illustrates that.