News for hackers. Stuff that matters.
Re:LXC vs. Docker by m463 on Friday February 18, 2022 @02:43PM (#30390192)
I would say docker's killer feature is the Dockerfile. It makes it understandable, reproducible and available to a broad range of people.

At least they mentioned it in their apple:oranges comparison.

there's also the global namespace thing. "FROM ubuntu:18.04" is pretty powerful.

I run a proxmox server with LXC but if I could use a dockerfile or equivalent, my containers would be much much more organized. I wouldn't like to pull images from the internet however.

Re:LXC vs. Docker by sreevisakh on Friday February 18, 2022 @09:04PM (#30393759)
Hashicorp Packer is a nice way to declare container builds as code. The containers are reproducible as far as I can tell. The biggest advantage with Packer though, is that you can create several different types (dozens) of container and VM images (docker/OCI, LXC/LXD, qcow2, AWS, Google cloud, ...) from a single declaration.
Re:LXC vs. Docker by richardwhiuk on Friday February 18, 2022 @02:49PM (#30390243)
Understandable? Yes.

Reproducible? No. Most Dockerfiles are incredibly unreproducible.

Re:LXC vs. Docker by m463 on Saturday February 19, 2022 @02:08AM (#30395007)
I think it's more reproducible like a recipe.

Yes, baking doesn't work the same at sea level vs say denver colorado @ 1 mile, but pretty much you can share your recipe with friends and save them lots of time.

Re:LXC vs. Docker by zelphirkalt on Friday February 18, 2022 @03:46PM (#30390842)
Most are not, that's true.

It is possible to get to reproducibility though, by involving lots of checksums. For example you can use the checksum of a base image in your initial FROM line. You can download libraries as source code and install them. You can use package managers with lock files to get to reproducible environments of the language you are using. You can check checksums of other downloaded files. It takes work, but sometimes it is worth it.

Re:LXC vs. Docker by GauntletWizard on Friday February 18, 2022 @08:12PM (#30393455)
That work is hard and the tooling is bad and it only takes one mistake, like forgetting to suppress the mtime of your files.

Docker was good enough, simple enough, and got the job done. It won for good reason, but the next generation should learn from it's mistakes.