News for hackers. Stuff that matters.
Re:Disabling Docker ICC still allows raw ethernet communicat... by c0n5pir4cy on Wednesday February 21, 2018 @05:30AM (#16428422)
As someone who has used both extensively. I wouldn't say Docker and Jails are directly comparable; Jails are a lot more comparable to something like LXC.

Jails doesn't have any of the deployment, tools for creating images, building of images, registry for images etc. Docker also automates a lot of networking stuff away whereas with jails I usually have to use something like PF to set up port forwards; I also sometimes run into problems with the fact it shares the network stack with the host.

That being said, all the configuration is quite simple and building exactly what I need for running an application isn't too difficult. The big advantage after that being that I understand how everything is wired together and I can debug easier when something goes wrong. Doing it manually however takes up much more time.

Re:Disabling Docker ICC still allows raw ethernet communicat... by boomboomsubban on Monday February 26, 2018 @04:39AM (#16464180)
Terribly late reply, sorry, but the deployment tools are all in ZFS. Giving each jail it's own ZFS file system let's you have templates with a bunch of steps done, or mass copy a complete jail. And with ZFS send/receive, you can share them.