Re: OS-level virtualization

[Brad Spencer <brad%anduin.eldar.org@localhost>]

"Aaron B." <aaron%zadzmo.org@localhost> writes:

> On Tue, 6 Apr 2021 12:32:46 +0300
> Pierre-Philipp Braun <pbraun%nethence.com@localhost> wrote:
>
>> >> What is NetBSD?s analogue (or the closest thing) to Illumos Zones and/or FreeBSD Jails?  Is there anything beyond chroot(2)?
>> > 
>> > AFAIK no
>> 
>> Right, well, we still can benefit from, say daemon-level virtualization, 
>> as some daemons have the chroot capability built-in.  For example NSD, 
>> Postfix have it.  I can only suppose it's a bit stronger than the system 
>> chroot.  Is it?
>> 
>
> It's just the same chroot system call under the hood. And currently,
> that's all there is. The kernel simply doesn't have any other way to
> isolate processes at the time.
>
> --
> Aaron B. <aaron%zadzmo.org@localhost>



As the risk of drawing abuse, perhaps.. does RUMP count??



-- 
Brad Spencer - brad%anduin.eldar.org@localhost - KC8VKS - http://anduin.eldar.org