News for hackers. Stuff that matters.
Re:Disabling Docker ICC still allows raw ethernet communicat... by bthornbury on Tuesday February 20, 2018 @07:44PM (#16425780)
How does the isolation compare with docker in general?

Not familiar with freeBSD jails.

Re:Disabling Docker ICC still allows raw ethernet communicat... by boomboomsubban on Wednesday February 21, 2018 @02:29AM (#16427606)
I'm sure this isn't a total list of features, but Wikipedia's comparison shows jails having all the features of Docker. https://en.wikipedia.org/wiki/Operating-system-level_virtual...
Re:Disabling Docker ICC still allows raw ethernet communicat... by c0n5pir4cy on Wednesday February 21, 2018 @05:30AM (#16428422)
As someone who has used both extensively. I wouldn't say Docker and Jails are directly comparable; Jails are a lot more comparable to something like LXC.

Jails doesn't have any of the deployment, tools for creating images, building of images, registry for images etc. Docker also automates a lot of networking stuff away whereas with jails I usually have to use something like PF to set up port forwards; I also sometimes run into problems with the fact it shares the network stack with the host.

That being said, all the configuration is quite simple and building exactly what I need for running an application isn't too difficult. The big advantage after that being that I understand how everything is wired together and I can debug easier when something goes wrong. Doing it manually however takes up much more time.

Re:Disabling Docker ICC still allows raw ethernet communicat... by boomboomsubban on Monday February 26, 2018 @04:39AM (#16464180)
Terribly late reply, sorry, but the deployment tools are all in ZFS. Giving each jail it's own ZFS file system let's you have templates with a bunch of steps done, or mass copy a complete jail. And with ZFS send/receive, you can share them.
Re:Disabling Docker ICC still allows raw ethernet communicat... by icebraining on Wednesday February 21, 2018 @06:27AM (#16428675)
Docker is a high-level container management tool, which uses container execution technologies underneath. Initially they used LXC, which is comparable to Jails, and in fact there's someone porting Docker to use FreeBSD Jails: https://github.com/kvasdopil/docker/blob/freebsd-compat/FREE...