News for hackers. Stuff that matters.

A comment on SELinux is unmanageable; just turn it off if it gets in your way. Parent comment

Re:SELinux is unmanageable; just turn it off if it gets in y... by geraldwhen on Wednesday April 27, 2022 @06:20AM (#31178245)
https://www.diva-portal.org/smash/get/diva2:1252694/FULLTEXT...

Also docker NAT will add significant latency if you don’t use host network mode.

When microseconds matter, everything matters. Any intermediate program would be suspect.

[ Parent | on HN ]
Re:SELinux is unmanageable; just turn it off if it gets in y... by megous on Wednesday April 27, 2022 @08:06AM (#31178874)
Then that's not about containers, but about NAT. So maybe don't use NAT. You can have NAT on the host, too, and it would slow down things also.

"Container" (namespace to be precise) is not really an intermediate program, it's a state associated with any Linux process.

[ Parent | on HN ]