Re:Tech Preview of Docker Desktop for M1
by ploxiln on Wednesday December 16, 2020 @03:17PM
(#25447960)
I used docker inside a vagrant+virtualbox VM running ubuntu, on macOS, for a few years. It's more reliable, and more debuggable, than docker for mac. It's some easy-auto-transparent storage and networking layers that make docker-for-mac so flaky.
Re:Tech Preview of Docker Desktop for M1
by GGfpc on Wednesday December 16, 2020 @07:11PM
(#25450585)
So you have your setup documented anywhere?
Re:Tech Preview of Docker Desktop for M1
by my123 on Wednesday December 16, 2020 @03:12PM
(#25447901)
They have containers already in a sense, whatever the iOS Simulator.app uses is not VMs, and it's a container in more ways than just one.
Re:Tech Preview of Docker Desktop for M1
by astrange on Wednesday December 16, 2020 @04:32PM
(#25449017)
It's a launchd namespace. It's not meant to be secure in the same way a container would be, but it could be used for something.
Re:Tech Preview of Docker Desktop for M1
by BillinghamJ on Wednesday December 16, 2020 @04:43PM
(#25449171)
That is not exactly designed to deliver any kind of isolation though - it just runs normal processes
It's extremely slow compared to Linux and I'm pointing my fingers at the virtualization layer without any hard evidence because it's the most likely suspect.
With all this focus on sandboxing apps of late, I'm wondering how far the OSX kernel is from having a feature set that resembles cgroups and network namespaces.