3 ms·
Not really, it is using all of the exact same kernel namespacing code that LXC has used. Would you consider LXC pretty battle tested? I certainly would. It has
by SEJeff 12y ago
Not really, it is using all of the exact same kernel namespacing code that LXC has used. Would you consider LXC pretty battle tested? I certainly would. It has been in the kernel for years.
Now you mentioned earlier that Docker is not a "super chroot" (your words, not mine). Yes it is! You can break out of a chroot with root privilege inside the chroot, ditto for a linux container using LXC or when using docker without the right settings to drop capabilities.
Granted, this all changes when user namespace support is merged into the Linux kernel, but they've been working on that code for quite some time. Additionally, if you want to be pedantic, it Btrfs, not BtrFS. As other people have said, docker is really not a huge codebase. It is primarily glue code on existing and very well established functionality in the Linux kernel. Try to check your facts next time before spouting so much FUD.