On: Containers vs. Zones vs. Jails vs. VMs

[qaq]

SmartOS run containers in zones get the best of both worlds

[johnramsden → qaq]

I always run my containers in a jail which I run in a zone which is running in a VM just in case.

[qaq → johnramsden]

I appreciate the humor but having an ability to run containers in a zone gives you very good isolation without overhead of a VM.

[erikb → johnramsden]

And never connect it to the internet, ever. Island is best land.

[mcnaughtonrules → johnramsden]

All behind NAT to make it securr