4 ms·
Jails. Recently I have configured a dedicated server to run nginx + php-fpm in jail: an entire jail consists of two static executable files, a few config files,
by mkup 14y ago
Jails. Recently I have configured a dedicated server to run nginx + php-fpm in jail: an entire jail consists of two static executable files, a few config files, and a few logs. There's nothing to pwn there, even if there's unpatched stack vulnerability somewhere. Jails are a very impressive security feature of FreeBSD.
- hedwall 14y agoDo you know how they compare to Linux Containers?
- Spooky23 14y agoThey are similar. My trepidation with LXC would be from a documentation POV... Jails are very much known quantities, while LXC is newer, not known for great docs, and thus is probably easier to screw up. See this HN thread for more discussion: http://news.ycombinator.com/item?id=4015172 http://news.ycombinator.com/item?id=4015172