On: Containers vs. Zones vs. Jails vs. VMs

[johnramsden]

I always run my containers in a jail which I run in a zone which is running in a VM just in case.

[qaq → johnramsden]

I appreciate the humor but having an ability to run containers in a zone gives you very good isolation without overhead of a VM.

[erikb → johnramsden]

And never connect it to the internet, ever. Island is best land.

[mcnaughtonrules → johnramsden]

All behind NAT to make it securr