News for hackers. Stuff that matters.

A comment on My VM is lighter (and safer) than your container (2017). Parent comment

Re:My VM is lighter (and safer) than your container (2017) by vilunov on Tuesday May 14, 2024 @09:47AM (#40355192)
Yeah, but that's not an incidental property of *namespaces* (of which cgroups is only one isolation axis), that was the requirement when namespaces were designed.
[ Parent | on HN ]
Re:My VM is lighter (and safer) than your container (2017) by bayindirh on Tuesday May 14, 2024 @09:56AM (#40355277)
Yeah, I know. Namespaces are pretty cool outside containers too.

My comment was more of a soft jab against using containers as the ultimate "thing" for anything and everything. I prefer to use them as "statically linked binaries" for short lived processes (like document building, etc.).

But, whenever someone abuses containers (like adding an HTTPs fronting container in front of anything which can handle HTTPS on its own) I'm displeased.

Relevant XKCD: https://xkcd.com/1988/

[ Parent | on HN ]