Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

To quote Jessie's blog post [0]: "containers were not a top level design, they are something we build from Linux primitives [Linux namespaces and cgroups]".

cgroups can be used without namespaces, and the reverse is also true. Both of them are part of linux container implementations (like lxc and docker), but for an easy example, systemd uses cgroups for every service, and only uses namespaces for ones you very explicitly turn them on for.

Don't quote me on this, but I also think cgroups landed in the kernel many years before namespaces did.

[0]: https://blog.jessfraz.com/post/containers-zones-jails-vms/



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: