| ▲ | palata 6 hours ago | |||||||||||||||||||||||||||||||||||||||||||||||||||||||
Nice article! > To solve the distribution and isolation problem, Linux engineers built a set of kernel primitives (namespaces, cgroups, seccomp) and then, in a very Linux fashion, built an entire ecosystem of abstractions on top to “simplify” things: [...] Somehow we ended up with an overengineered mess of leaky abstractions Not sure I like the value judgement here. I think it's more of a consequence of Linux' success. I am convinced that if it was reversed (Linux was niche and *BSD the norm), then a ton of abstractions would come, and the average user would "use an overengineered mess" because they don't know better (or don't care or don't have a need to care). Not that I like it when people ship their binary in a 6G docker image. But I don't think it's fair to put that on "those Linux engineers". | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ▲ | jacquesm an hour ago | parent | next [-] | |||||||||||||||||||||||||||||||||||||||||||||||||||||||
I don't agree with that. FreeBSD has more of an engineering than a hacking mentality and it shows in the various architectural choices. And containers really are a VM-light, so you might as well use the real thing, in fact, VMWare for a long time thought that their images would be a container like thing and many larger installations used them as such. | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ▲ | realusername 5 hours ago | parent | prev [-] | |||||||||||||||||||||||||||||||||||||||||||||||||||||||
I don't think it's necessarily true, compare the BSD utils to the GNU utils and the style difference is very visible. On the other hand, I don't think the comparison between jails and docker is fair. What made Docker popular is the reusability of the containers, certainty not the sandboxing which in the early days was very leaky. | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||