5 ms·
What's old is new. You're describing containers I think.
by bandrami 12y ago
What's old is new. You're describing containers I think.
- rwmj 12y agoOr chroots, jails, libvirt-sandbox, etc etc.
- XorNot 12y agochroot's aren't namespaced, which is a big important difference. Being able to kill the entire container by killing it's init process (and keep it's processes out of the host namespace) is a huge deal.
- otterley 12y agoMost of these implementations actually kill all processes in the namespace, not just init. First, there may not be an init (the root process could be the service, which is actually a best practice with respect to containers); and second, the signal may not be propagated to its children, especially if a non-trappable signal (e.g. SIGKILL) is sent.
- asdfaoeu 12y agoA sigkill is sent to everything in the namespace if the init/root process dies anyway. So effectively it is auto propergated.
- bandrami 12y agochroot's aren't namespaced Sure they are. If you chroot apache to /var/www, then /var/www is now / in the chroot'ed namespace.
- regularfry 12y agoYeah, and if "everything is a file" was actually true, then the filesystem would be the only namespace you needed to care about. It isn't.
- miah_ 12y agoSee: User Mode Linux, available since somewhere around 2002 or 2003. http://user-mode-linux.sourceforge.net/ http://user-mode-linux.sourceforge.net/ https://en.wikipedia.org/wiki/User-mode_Linux https://en.wikipedia.org/wiki/User-mode_Linux
- icebraining 12y agoNot really the same, since that runs a full kernel for each "container". OpenVZ is a better example (and is, in fact, the precursor of LXC).