3 ms·
Honestly though... why not just systemd containers with minimal mounts, and if you're needing an ip, what not an unprivledged LXC container? The surface area is
by exabrial 3mo ago
Honestly though... why not just systemd containers with minimal mounts, and if you're needing an ip, what not an unprivledged LXC container? The surface area is far smaller and they're way easier to inspect.
- regexorcist 3mo agoSystemd-nspawn is great. You can have any networking you like with it too, no need for LXC.
- exabrial 3mo agoI haven't dove into that yet! But it does look pretty danged neat. I'm really starting to realize that containership should be handled by the process manager