| ▲ | vbezhenar 3 days ago | ||||||||||||||||||||||||||||
Docker is a genius idea which looks obvious in retrospect, but someone need to invent it. Docker is more than just chroot. You also need: overlay file system; OCI registry and community behind it, to create thousands of useful images. And, of course, the whole idea of creating images layer by layer and using immutable images to spawn mutable containers. I don't actually think that you need network or process isolation. In terms of isolation, chroot is enough for most practical needs. Network and process isolations are nice to have, but they are not essential. | |||||||||||||||||||||||||||||
| ▲ | harrall 2 days ago | parent | next [-] | ||||||||||||||||||||||||||||
I was a very early adopter of Docker and what sold me was Dockerfiles. A SINGLE regular text file that took regular shell commands and could build the same deployment from scratch every time and then be cleaned up in one command. This was UNHEARD of. Every other solution required learning new languages, defining “modules,” creating sets of scripts, or doing a lot of extra things. None of that was steezy. I was so sold on Dockerfiles that I figured that even if the Docker project died, my Dockerfiles would continue to live because other people would try copy the idea of Dockerfiles. Now it’s been 10 years and Docker and containerization has changed a lot but what hasn’t? Dockerfiles. My 10 year Dockerfiles are still valid. That’s how good they were. | |||||||||||||||||||||||||||||
| ▲ | akdev1l 3 days ago | parent | prev | next [-] | ||||||||||||||||||||||||||||
network isolation is very important too, that’s what lets people run 4 containers all listening on port 80 process isolation is less prominent | |||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||
| ▲ | tguvot 2 days ago | parent | prev | next [-] | ||||||||||||||||||||||||||||
i tried to build at work something like docker around 2003-2004. was trying to solve problem of distribution/updates/rollblacks of software on network appliances that we made. overlay filesystems back then were immature/buggy so it went nowhere. loopback mounted system was not sufficient (don't remember why) | |||||||||||||||||||||||||||||
| ▲ | lyu07282 3 days ago | parent | prev [-] | ||||||||||||||||||||||||||||
What I always wondered is why qcow2 + qemu never gave rise to a similar system, they support snapshots/backing-files so it should be possible to implement a system similar to docker? Instead what we got is just this terrible libvirt. | |||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||