Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

LXC uses chroot + other things. chroot is essentially the foundation of any containerization tool.


Not really- chroot provides no isolation, namespaces do. choot is the visible portion (changes root.. ie changes /mnt/blah/bleh to /) but not "the foundation"

Things can in fact work isolated without chroot, too. Its just convenient.


Note that chroot will provide containerization, but without isolation (processes can always fork out of their chroot jails). You still need things like pid namespaces etc.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: