After spending a scant few minutes looking at it, here are the things I like about this project so far: - It has a "How and why are we different" page. In the age of "I made a meta package on top of Ubuntu and called it a new OS", it's refreshing to see a Linux distribution come right out and say "here's what we do that separates us from the other 700". - It actually is different. Recognizing the nigh-uselessness of…
EasyOS: An experimental Linux distribution designed from scratch for containers
51–60 of 94 posts
Re: EasyOS: An experimental Linux distribution designed from scratch for containers
#52If everything is a container, does that mean processes have failed?
Re: EasyOS: An experimental Linux distribution designed from scratch for containers
#53Earlier quoted context omitted.
I could be misunderstanding, but isn't this actually just a new OS for use in any containerization system, rather than a containerization system itself? This seems more in line with Alpine Linux or Google's Distroless images than something like a new docker
> EasyOS is designed from scratch to support containers. Any app can run in a container, in fact an entire desktop can run in a container. Container management is by a simple GUI, no messing around on the commandline. The container mechanism is named Easy Containers, and is designed from scratch (Docker, LXC, etc are not used). Easy Containers are extremely efficient, with almost no overhead -- the base size of each…
Re: EasyOS: An experimental Linux distribution designed from scratch for containers
#54Earlier quoted context omitted.
I could be misunderstanding, but isn't this actually just a new OS for use in any containerization system, rather than a containerization system itself? This seems more in line with Alpine Linux or Google's Distroless images than something like a new docker
> EasyOS is designed from scratch to support containers. Any app can run in a container, in fact an entire desktop can run in a container. Container management is by a simple GUI, no messing around on the commandline. The container mechanism is named Easy Containers, and is designed from scratch (Docker, LXC, etc are not used). Easy Containers are extremely efficient, with almost no overhead -- the base size of each…
Re: EasyOS: An experimental Linux distribution designed from scratch for containers
#55After spending a scant few minutes looking at it, here are the things I like about this project so far: - It has a "How and why are we different" page. In the age of "I made a meta package on top of Ubuntu and called it a new OS", it's refreshing to see a Linux distribution come right out and say "here's what we do that separates us from the other 700". - It actually is different. Recognizing the nigh-uselessness of…
So you're telling me I have no tools and no existing tools are going to work.
Good to get that out in the open, I suppose.
Re: EasyOS: An experimental Linux distribution designed from scratch for containers
#56Earlier quoted context omitted.
I’d personally say that the concept of users and user groups have failed, at least on systems that have only one user.
This is what I'd agree with. The concept of user and group are hand-me-downs from systems built for sharing networked resources and pretty much requires some kind of centralized AAA to make any sense. They're a model designed for protecting the system from users and users from eachother, but that doesn't make any sense on a personal computer where the more pressing need is to protect the user from malicious applicati…
Of course it makes sense. Running applications as restricted users has been standard practice for decades, precisely because it makes sense.
Re: EasyOS: An experimental Linux distribution designed from scratch for containers
#57Re: EasyOS: An experimental Linux distribution designed from scratch for containers
#58Earlier quoted context omitted.
This is what I'd agree with. The concept of user and group are hand-me-downs from systems built for sharing networked resources and pretty much requires some kind of centralized AAA to make any sense. They're a model designed for protecting the system from users and users from eachother, but that doesn't make any sense on a personal computer where the more pressing need is to protect the user from malicious applicati…
> that doesn't make any sense on a personal computer where the more pressing need is to protect the user from malicious applications. Of course it makes sense. Running applications as restricted users has been standard practice for decades, precisely because it makes sense.
Re: EasyOS: An experimental Linux distribution designed from scratch for containers
#59After spending a scant few minutes looking at it, here are the things I like about this project so far: - It has a "How and why are we different" page. In the age of "I made a meta package on top of Ubuntu and called it a new OS", it's refreshing to see a Linux distribution come right out and say "here's what we do that separates us from the other 700". - It actually is different. Recognizing the nigh-uselessness of…
> embracing of simple GUI tools over terminal wankery, eschewing of the legacy UNIX file hierarchy. So you're telling me I have no tools and no existing tools are going to work. Good to get that out in the open, I suppose.
Re: EasyOS: An experimental Linux distribution designed from scratch for containers
#60Earlier quoted context omitted.
I’d personally say that the concept of users and user groups have failed, at least on systems that have only one user.
>the concept of users and user groups have failed Hopefully we won't go back to the Win95/98 era of everything running as single user! Having services run isolated as their own users is not merely a good security mechanics, it provides for a clear and simple mental model of what is what. A clear permissions barrier that's enforced pretty strictly by the OS. Moreover we see separate user accounts more and more; even o…
In the case you're making, a user (a real actual human user) has different settings when _using_ the phone in two contexts. In the latter case, applications are restricted to sandboxes with well-defined interactions between each other's memory, processes, devices, sockets, and files.