News for hackers. Stuff that matters.

A comment on The Evolution of Container Usage at Netflix. Parent comment

Re:The Evolution of Container Usage at Netflix by lima on Friday April 21, 2017 @10:37AM (#14165955)
Containers don't actually run directly on hardware with GCE - there's still a virtualization layer in-between.

I'm 99% sure that Google runs one VM per container because that's the only way to make it safe.

Anything else would be insane.

[ Parent | on HN ]
Re:The Evolution of Container Usage at Netflix by outworlder on Friday April 21, 2017 @03:14PM (#14168469)
> I'm 99% sure that Google runs one VM per container

I'm 100% sure you are wrong. You might as well just use VMs.

Containers are not only about safety, you know.

[ Parent | on HN ]
Re:The Evolution of Container Usage at Netflix by lima on Friday April 21, 2017 @06:40PM (#14169990)
I stand corrected, it's a bunch of VMs per customer but still no multi-tenancy.
[ Parent | on HN ]
Re:The Evolution of Container Usage at Netflix by jakon89 on Friday April 21, 2017 @01:38PM (#14167570)
1 container per VM? What's the point? If you can bypass container sandbox it's very likely that you can do the same with VM.
[ Parent | on HN ]
Re:The Evolution of Container Usage at Netflix by lima on Friday April 21, 2017 @06:39PM (#14169984)
> If you can bypass container sandbox it's very likely that you can do the same with VM.

Hypervisors are much, much harder to break out of than a Linux container.

[ Parent | on HN ]