Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Containers are just namespaces, mount, user, pin, and network namespaces.

The reason why chroot is not enough is that you want to allow a different pace of using certain dependencies is different applications. In a way its similar to how Mac OS packages applications as they all ship their own prefix root so to say.



s/pin/pid/ namespace - sorry, just correcting this for newcomers.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: