News for hackers. Stuff that matters.

A comment on My VM is lighter (and safer) than your container (2017). Parent comment

Re:My VM is lighter (and safer) than your container (2017) by NorwegianDude on Thursday September 08, 2022 @03:23PM (#32770704)
I've been using containers since 2007 for isolating workloads. I don't really like Docker for production either because of the network overhead with the "docker-way" of doing things.

LXD is definetly my favorite container tool.

[ Parent | on HN ]
Re:My VM is lighter (and safer) than your container (2017) by indigodaddy on Thursday September 08, 2022 @11:44PM (#32775068)
LXD can now do VM as well. https://ubuntu.com/blog/lxd-virtual-machines-an-overview
[ Parent | on HN ]
Re:My VM is lighter (and safer) than your container (2017) by pojzon on Thursday September 08, 2022 @04:07PM (#32771333)
How differently LXD manages isolation in comparison to docker ?

I suppose both create netns, bridge, ifs ?

[ Parent | on HN ]
Re:My VM is lighter (and safer) than your container (2017) by antod on Thursday September 08, 2022 @05:41PM (#32772454)
LXC/LXD use the same kernel isolation/security features Docker does - namespaces, cgroups, capabilities etc.

After all, it is the kernel functionality lets you run something as a container. Docker and LXC/LXD are different management / FS packaging layers on top of that.

[ Parent | on HN ]
Re:My VM is lighter (and safer) than your container (2017) by staticassertion on Thursday September 08, 2022 @05:42PM (#32772471)
I assume it's not using seccomp, which Docker uses, although seccomp is not Docker specific and you can go grab their policy.
[ Parent | on HN ]
Re:My VM is lighter (and safer) than your container (2017) by lstodd on Thursday September 08, 2022 @05:33PM (#32772375)
It's the same stuff - namespaces, etc. But it doesn't shove greasy fingers into network config like docker. More a tooling question/approach than tech.
[ Parent | on HN ]
Re:My VM is lighter (and safer) than your container (2017) by zonethundery on Friday September 09, 2022 @08:45AM (#32778443)
Have similar feelings about docker. LXD containers through a bridged interface fit my mental model/use case.
[ Parent | on HN ]