From owner-freebsd-questions@freebsd.org Sat Feb 15 06:21:34 2020 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 57621250185 for ; Sat, 15 Feb 2020 06:21:34 +0000 (UTC) (envelope-from vas@sibptus.ru) Received: from admin.sibptus.ru (admin.sibptus.ru [IPv6:2001:19f0:5001:21dc::10]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 48KKrs3jqTz3LkN for ; Sat, 15 Feb 2020 06:21:33 +0000 (UTC) (envelope-from vas@sibptus.ru) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sibptus.ru; s=20181118; h=In-Reply-To:Message-ID:Subject:To:From:Date; bh=6HB5ZoNoNXHoaDDwPQq2vqLYS1MqzNLJuqFfCtLopxs=; b=G0LPWHVDeBWGJ4MlmrySdjMtbg Siazd7/plEpuiofMP+1MAsHfp+hhc1zPds+y66Md0gxtCV9tdBHF1TtL8GhiIVsrwsDITDDDvJPeB q6akq2PHwJZavZ0qrwe/msuBwgZ34yg4TDMXZ4PH+s7kaQZNCM5UUESnwsqpVdju/2d8=; Received: from vas by admin.sibptus.ru with local (Exim 4.92.3 (FreeBSD)) (envelope-from ) id 1j2qpY-0000qJ-5t for freebsd-questions@freebsd.org; Sat, 15 Feb 2020 13:21:32 +0700 Date: Sat, 15 Feb 2020 13:21:32 +0700 From: Victor Sudakov To: freebsd-questions@freebsd.org Subject: Re: Technological advantages over Linux Message-ID: <20200215062132.GD1482@admin.sibptus.ru> References: <20200214121620.GA80657@admin.sibptus.ru> <20200214141600.GA82559@admin.sibptus.ru> <1eb61cba-5e28-e8ea-c418-a06f0f94ec86@kicp.uchicago.edu> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="vni90+aGYgRvsTuO" Content-Disposition: inline In-Reply-To: <1eb61cba-5e28-e8ea-c418-a06f0f94ec86@kicp.uchicago.edu> X-PGP-Key: http://admin.sibptus.ru/~vas/ X-PGP-Fingerprint: 10E3 1171 1273 E007 C2E9 3532 0DA4 F259 9B5E C634 X-Rspamd-Queue-Id: 48KKrs3jqTz3LkN X-Spamd-Bar: -------- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=sibptus.ru header.s=20181118 header.b=G0LPWHVD; dmarc=pass (policy=none) header.from=sibptus.ru; spf=pass (mx1.freebsd.org: domain of vas@sibptus.ru designates 2001:19f0:5001:21dc::10 as permitted sender) smtp.mailfrom=vas@sibptus.ru X-Spamd-Result: default: False [-8.44 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[sibptus.ru:s=20181118]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+mx:c]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; TO_DN_NONE(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; RCPT_COUNT_ONE(0.00)[1]; IP_SCORE(-3.34)[ip: (-9.89), ipnet: 2001:19f0:5000::/38(-4.94), asn: 20473(-1.79), country: US(-0.05)]; DKIM_TRACE(0.00)[sibptus.ru:+]; DMARC_POLICY_ALLOW(-0.50)[sibptus.ru,none]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:20473, ipnet:2001:19f0:5000::/38, country:US]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 15 Feb 2020 06:21:34 -0000 --vni90+aGYgRvsTuO Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Valeri Galtsev wrote: [dd] > >=20 > > For example, the absence of Docker (or analogous technology) for FreeBSD > > is a huge disadvantage. We need to name really superiour features to > > make up for this shortage. > >=20 >=20 > In my book docker is really a disadvantage, not advantage, compared to > FreeBSD jails. Namely: >=20 > 1. docker carries pretty much whole system for one instance of what you r= un > in docker (that is, you have to patch all those instances of docker you > run), whereas whole bunch of jails can run under single instance of base > system; hence only one base system to update/patch I'm no Docker expert by any means, but from what I was shown by Docker advocates, you fetch the base system (usually the Alpine Linux, only about 40Mb in size) only once, and all application containers work on top of it. Once you update the Alpine container, all your container stacks are updated. Correct me if I'm wrong about the above. With FreeBSD's Linux binary compatibility, I see absolutely no reason why Docker has not been successfully ported to FreeBSD to run native linux containers (only with linuxolator enabled, because all necessary linux libs would be in containers). It could give a huge boost to FreeBSD's user base. >=20 > 2. [correct me someone if I'm wrong, I'm not a Docker expert): docker has > system whose components are read-write inside of its instance, hence it is That probably depends on how you compose your containers. Again, from what I was shown by Docker advocates, Docker has a way for contained applications to write to dedicated directories of the host's filesystem if need be. --=20 Victor Sudakov, VAS4-RIPE, VAS47-RIPN 2:5005/49@fidonet http://vas.tomsk.ru/ --vni90+aGYgRvsTuO Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEcBAEBAgAGBQJeR43sAAoJEA2k8lmbXsY0GFMH/0Vc9enZYHD1uHrcdDKaz9yK BmH9x/bdOhIMPXUpvJdfgOPPlJj47SxEog1sH3PgSMmGIWB/T/vgY1xEUOX4whWr W1AbZvUjmn3ghP3knVGOdLiGZb//pcdWqO4Vv+ninHn6yPg2lV1w9a2szW43sgHh glx0bT+Jz9ApCfgidy/BPnS07ChaO4+Ik8bQoqbEpRGWjEnwe2C7v1oYX/7Ei9Ry watWsSFmF0Br/u/Uglsyav7TiVtDMXjfcRcu8wieYMK7nqUFQr/HFvaafSIbqMhM +aVqWGDCJLqNoz8f8/jE6dEQFTA/ojO9YjyRW81RWSMKcEKtxU3qMU1PlLBRHvM= =JIHN -----END PGP SIGNATURE----- --vni90+aGYgRvsTuO--