Author: Q5sys Language: text
Description: Jails vs Containers Timestamp: 2013-05-30 19:35:41 +0000
View raw paste Reply
  1. Allan,
  2.  
  3. I've watched the LAS BSD 9.1 review episode where you go into discussing BSD Jails, and with the LAS episode last week reviewing Linux Contained (lxc), I had a few discussions this week regarding which is more secure.
  4.  
  5. From my understanding LXC use the host kernel, and use shared memory, network stack, etc with the host and other containers.
  6. Does BSD (linux compat layer asside) run a seperate memory space, hardware stacks for each jail? Can there be any memory bleed between Jails?
  7.  
  8. I know some hosting companies are now using OpenVZ which is based on LXC (if my understanding is correct) as a VPS solution. How does this compare with a legitimate baremetal hypervisor's VPS solution with respect to security?
  9.  
  10. Basically if you could bottom line the pros/cons between the BSD Jails and LXC from the security and stability mindset, that'd help put to rest a ton of questions me and several others I work with.
  11.  
  12. Thanks, and keep up the good work.
View raw paste Reply