News for hackers. Stuff that matters.

A comment on Iocage – A FreeBSD jail manager. Parent comment

Re:Iocage – A FreeBSD jail manager by langseth on Monday November 14, 2016 @05:09PM (#12953819)
Across jails, pids are not visible. I can't comment on the ability of a user on the root of a linux system being able to see the pids in a LXC, but I bet there is a way. After all they are running on the same kernel. Is the non-visibility of the proceses just a userland trick on linux?

Resource limits for Jails can be done with rctl

[ Parent | on HN ]
Re:Iocage – A FreeBSD jail manager by zzzcpan on Monday November 14, 2016 @05:12PM (#12953835)
It's important to understand, when people talk about cgroups, they do mean not only CPU/memory limits, but also network and disk I/O limits, that freebsd doesn't offer out of the box.
[ Parent | on HN ]
Re:Iocage – A FreeBSD jail manager by crest on Friday November 18, 2016 @09:18AM (#12986887)
The firewall can match on the jail id for local sockets and apply traffic shaping based on these matches. Hierarchical resource limits on CPU/disk/memory/... can be configured per jail.
[ Parent | on HN ]