3 ms·
Given you can have infinitely nested LXC containers almost for free, I wonder what's used to really isolate the .snap packages. You can have Docker apps running
by caio1982 12y ago
Given you can have infinitely nested LXC containers almost for free, I wonder what's used to really isolate the .snap packages. You can have Docker apps running on top of Snappy just like demonstrated, that's alright, but Snappy itself must know how to isolate things well and I'd guess it's LXC given Canonical's experience with it?
- vidarh 12y agoLXC is "just" a wrapper around cgroups. There are plenty of alternatives, including systemd-nspawn, or just configuring cgroups directly.