4 ms·
Is there a "best article" out there comparing BSD Jails to Docker and the strengths and weaknesses of choosing one or the other? (I'm also curious if BSD Jails
by mikece 3y ago
Is there a "best article" out there comparing BSD Jails to Docker and the strengths and weaknesses of choosing one or the other?
(I'm also curious if BSD Jails are the same thing as Solaris Zones but with a different name or if there is significant nuance making them different).
- tptacek 3y agoUse whichever one you're more comfortable with and that suits the rest of your stack best. There's nothing Jails are going to allow you to do that Linux containers can't do. All the shared-kernel workload isolation schemes are comparably safe.
- whalesalad 3y agohttps://blog.jessfraz.com/post/containers-zones-jails-vms/ https://blog.jessfraz.com/post/containers-zones-jails-vms/
- paulddraper 3y agoFor starters, Docker runs as a daemon.
- __turbobrew__ 3y agoFor starters starters, Docker is a few layers up in the stack from jails. You would be better off comparing runc to jails or just cgroups+namespaces to jails.
- paulddraper 3y agoNo. Docker and runc are very similar. Docker run Docker containers. runc runs OCI containers. And jails operate at a similar level, though without an image format.
- __turbobrew__ 3y agoRight, so jails do not have images or any of the tooling around building and distributing images which is the vast majority of what makes up docker. This is why cgroups+namespaces are much closer to jails than docker is. There are systems which build upon jails such as iocage and ezjail which are more similar to docker.