Re:Technical reasons to choose FreeBSD over GNU/Linux
by monadic2 on Monday April 13, 2020 @04:08PM
(#22859492)
LXC was only introduced in 2007. I wouldn't call ZFS a good comparison as I would also still consider it rather young in terms of basic unix technologies—depending on your needs, you could easily use some other simpler but older (and likely less buggier) software.
With respect to cgroups versus lxc specifically, I don't think the approach is well suited for security reasons—the surface area for bugs and vulnerabilities is much larger than with the jails approach.
Re:Technical reasons to choose FreeBSD over GNU/Linux
by viraptor on Monday April 13, 2020 @07:42PM
(#22861407)
> the surface area for bugs and vulnerabilities is much larger than with the jails approach
It would be great if someone wrote an article with technical details about it. I see this repeated very often, but if you actually go looking for details... it's hard to find any justification.
Re:Technical reasons to choose FreeBSD over GNU/Linux
by monadic2 on Wednesday April 15, 2020 @02:05PM
(#22880973)
I can’t say I have a decent justification off hand myself—this was the impression I had when digging through a comparison of the two softwares about a year back. Cgroups appears to have a much more detail laden implementation, but this could be explained away with my lack of Linux internals.
This depends completely on your choice of a distribution. There's nothing about package managers that makes a difference in this case.
For example Arch, especially with AUR will include all non-free software you want. Ubuntu offers them. Debian/RH have them one config edit away. Recently snap/flatpak also provide those to all distros - whether they're using free-only repos by default or not.
> In addition, LXC—in particular cgroups—is still quite young and unproven.
LXC was introduced over a decade ago. Cgroups even before that. Cgroups themselves are enabled per-session and per-service in pretty much every modern linux deployment for years now. There's less time between jails and cgroups than between cgroups and current day. Cgroups were added to linux in the same year as zfs was added to freebsd. (2007)
I'm not sure what you see as young or unproven about them.