3 ms·
If I set this up i would just run every service on the same machine sans jails. Are there any practical benefits to doing it like this? The extra complexity buy
by rokkamokka 10mo ago
If I set this up i would just run every service on the same machine sans jails. Are there any practical benefits to doing it like this? The extra complexity buys some slight measure of security in case one service is exploited, I guess?
- t_tsonev 10mo agoIsolation is certainly one big reason to use jails. You also get independent management of dependencies, and can optionally share the base system. They're somewhat similar to how you'd use Docker containers on Linux, but have different approach to security and networking.
- Nikkau 10mo agoIf you use *BSD, you have to use jails, it's just law