Live data from Hacker News

CBSD – FreeBSD Jail Management Tools

bsdstore.ru

31–40 of 42 posts

Re: CBSD – FreeBSD Jail Management Tools

#31
post #22

What is the impetus for needing an alternative? I don't know much about Docker, so this is a serious question.

docker:Linux::jails:FreeBSD

Not exactly. A more accurate comparison would be

docker:linux :: cbsd:freebsd

lxc:linux :: jails:linux

docker:lxc :: cbsd:jails

And if one day docker gets a jails execution driver:

docker:freebsd :: cbsd:freebsd docker:jails :: cbsd:jails

:)

Re: CBSD – FreeBSD Jail Management Tools

#32
post #15
post #11

Earlier quoted context omitted.

> Isn't one of Dockers killer features the layered file system? Use can mount anything you like to any mount point in jails. (Even without ZFS, with ZFS it's a different story.) I don't know about this CBSD, but ejail and qjail (similar tools) do that for you — they mount some “base” system in jail. Then you mount what you want, pkg install what want etc > I wonder if they're really rooting for a docker coming to the…

LXC is to Jail as Docker is to CBSD

> LXC is to Jail as Docker is to CBSD

Yes, exactly.

Re: CBSD – FreeBSD Jail Management Tools

#33
Interesting project, but I'm a little disappointed it's not a shiny new thing for the bhyve virtualization layer[1] introduced in freebsd-10, but rather builds on "plain" jails.

I'd say something like this on top of bhyve would be a closer match for docker (which sits on top of lxc).

[1] https://wiki.freebsd.org/action/show/bhyve?action=show&redir...

Re: CBSD – FreeBSD Jail Management Tools

#35
post #33

Interesting project, but I'm a little disappointed it's not a shiny new thing for the bhyve virtualization layer[1] introduced in freebsd-10, but rather builds on "plain" jails. I'd say something like this on top of bhyve would be a closer match for docker (which sits on top of lxc). [1] https://wiki.freebsd.org/action/show/bhyve?action=show&redir...

LXC is similar to jails and bhyve is more like KVM, so Docker would be the appropriate comparison for a jail management tool. Also, I wouldn't consider bhyve/KVM to be necessarily better than jails/LXC; one has better isolation and the other has better performance.

Re: CBSD – FreeBSD Jail Management Tools

#36
post #20

Earlier quoted context omitted.

It's the default alright, but that has nothing to do with it being in the base (yes, it's an exception to the rule). You can look it up on the freebsd-ports@, there were somewhat heated discussions concerning this and some other issues. Unless I've missed something, this decision hasn't changed.

pkg can also bootstrap itself. I don't have a fresh FreeBSD install w/o pkg already installed but upon first use it basically goes like this: $ pkg foo pkg is not installed. Install it? (y/n) y ... pkg is now installed

Right, that's what I said[1]---there's a shim pkg in base to install pkg proper from ports. The real pkg is in ports so it can receive continuous upgrades, which wouldn't be possible in a RELEASE (or STABLE for the most part) if it were in base.

[1] https://news.ycombinator.com/item?id=7114744

Re: CBSD – FreeBSD Jail Management Tools

#37
post #30
post #12

Earlier quoted context omitted.

Well, I had a hunch it was for this reason. I usually get grumpy when an arguably superior solution is presented as an 'alternative' to something that's just more popular because it's easier that way for people to grok what it's all about. But on the other hand, I've never been good at marketing, so who am I to complain. :)

Docker and Jails are not directly comparable, the same way Docker and raw lxc are not directly comparable. Docker operates at a higher level of abstraction, and uses lxc as a low-level sandboxing tool. It could (and soon will) offer a choice of multiple sandboxing backends beyond lxc, for example simple chroot (for older linux kernels), openvz, libvirt, etc. There are also people experimenting with using Jails and So…

Yeah, don't get me wrong, I think Docker is great. I remember when I first heard about it thinking "Finally, something approaching jails functionality in Linux." Of course, I know it's a different level of abstraction and all that. My comments were more directed at the underlying Linux infrastructure Docker uses. Granted, I may well be wrong, it's been a long time since I was seriously in Linux land (i.e. not just a mindless day-to-day user), I'm not current with hard technicalities so it's totally possible that I'm being unjust to LXC.

I'm happy to hear about plans for different backends, the jails one would be awesome if it comes to fruition.

Re: CBSD – FreeBSD Jail Management Tools

#38
post #23
post #8

This project seems great, but I feel there's something wrong with the submitted article title, it sounds weird (plus, there's no mention of Docker on the linked page). Sure, you can draw parallels between Docker and what FreeBSD jails and tools built on top do, but it would be fairer to say Docker is a Linux based alternative to jails, and not as powerful (as far as I understand Linux kernel infrastructure that Docke…

Why do you say that lxc (and cgroups) are less powerful than FreeBSD jails? From what I read in https://wiki.freebsd.org/Jails , jails don't yet have support for: * separate PID space * IO isolation cgroups provide extremely fine grained isolation, including among other things: * per-container OOM handler (userspace) * per-container swap * per-container disk I/O scheduling * per-container memory reclaim * per-contain…

> Why do you say that lxc (and cgroups) are less powerful than FreeBSD jails?

If I was wrong about this it's because I'm not up to date on things that happen in the Linux kernel, it wasn't my intention to bash it or anything like that.

Re: CBSD – FreeBSD Jail Management Tools

#39
post #21

Earlier quoted context omitted.

It seems that HN have switched to a different OS, but used be on FreeBSD: (scroll to "Hosting History") http://toolbar.netcraft.com/site_report?url=https%3A%2F%2Fne...

Linux in there is probably just because of CloudFlare. I had no idea what was HN running on until that outage a week or so ago with the switching of servers etc. A Tell HN[1] about the incident says they were using UFS and now switched to ZFS, and that can only mean FreeBSD. [1] https://news.ycombinator.com/item?id=7069013

This might be it: https://signup.netflix.com/openconnect/software

Re: CBSD – FreeBSD Jail Management Tools

#40
post #35
post #33

Interesting project, but I'm a little disappointed it's not a shiny new thing for the bhyve virtualization layer[1] introduced in freebsd-10, but rather builds on "plain" jails. I'd say something like this on top of bhyve would be a closer match for docker (which sits on top of lxc). [1] https://wiki.freebsd.org/action/show/bhyve?action=show&redir...

LXC is similar to jails and bhyve is more like KVM, so Docker would be the appropriate comparison for a jail management tool. Also, I wouldn't consider bhyve/KVM to be necessarily better than jails/LXC; one has better isolation and the other has better performance.

AFAIK bhyve only supports paravirtualization (and for now freebsd guests)?
Post reply on HN