Re:Wrapping Desktop Apps with Docker
by justincormack on Monday October 13, 2014 @08:32AM
(#8448422)
Originally bind mounts were only for directories, but support for files and hence named sockets was added later.
You can. The biggest caveat with isolating X clients in Docker is that you lose extensions like mit-shm (the shared memory extension), that badly affects performance compared to running apps locally. If you're used to running X apps over the network, then that's not such a big deal, though.
You can work around this problem by running X11 in the parent of the container and performing all your SHM (and similar) operations there. Essentially, coordination of such things needs to happen where the X11 server is running and not inside the container. This is how Gate One's (soon to be released) X11 feature currently works to isolate each user's X11 server.
There exists mechanisms to share memory between containers as well but I personally haven't tried them.
Sometimes I just love Unix.