On a related note, if you've got a free hour, there was a recent talk at BSDCan 2015 by Maciej Pasternacki on Jetpack, a container runtime for FreeBSD
Docker on FreeBSD
21–30 of 69 posts
Re: Docker on FreeBSD
#22Earlier quoted context omitted.
Do you happen to have a link to the XPC port? I just did a cursory search but couldn't find anything.
It's in Kip Macy's work branch: https://github.com/kmacy/NextBSD /lib/lib[asl, dispatch, launch, mach, osxsupport, xpc]. The XPC stuff is mostly Jakub Klama's work, I think.
Awesome thanks!
Re: Docker on FreeBSD
#23The FreeBSD people seem to be on a roll when it comes to porting things. They mention a 64-bit Linux compatibility layer they recently rolled out in this post. But in addition, some iXsystems employees have ported much of the OSF Mach kernel (sans memory object/external pager interface) as a module, plus partial or full implementations of XPC, libdispatch, ASL (Apple System Logger), liblaunch and other facilities jus…
The bit about adding in Mach/OS X support is really interesting. Any idea specifically what they're looking to run?
It's intriguing on its own and could provide a basis for reimplementations of CoreFoundation, AppKit, Quartz, etc, enabling the creation of FreeBSD-based "open OS X" of sorts.
Re: Docker on FreeBSD
#24The FreeBSD people seem to be on a roll when it comes to porting things. They mention a 64-bit Linux compatibility layer they recently rolled out in this post. But in addition, some iXsystems employees have ported much of the OSF Mach kernel (sans memory object/external pager interface) as a module, plus partial or full implementations of XPC, libdispatch, ASL (Apple System Logger), liblaunch and other facilities jus…
To be honest, I think OpenBSD is ahead on some fronts (research on security mechanisms, for instance), but the reason that I tend to use FreeBSD is that it actually works with software packages. So the computers are based on FreeBSD (which manages the hypervisor -- and soon container daemon!), and appliances only are based on OpenBSD. Compatibility ftw.
The only piece of software I really miss on OpenBSD is the Android SDK, other than that it has everything I use and it works great. So once again I want to tell everyone reading this, if you haven't tried it and if your hardware is supported I invite you to give OpenBSD a spin.
Re: Docker on FreeBSD
#25Earlier quoted context omitted.
> research on security mechanisms, for instance) Citation(s) requested.
http://youtu.be/OXS8ljif9b8 Edit: First 5 Minutes De Raadt speaks about Mitigation Techniques in comparison to other OSs, including FBSD. I fear, this is still true in mid-2015..
FreeBSD has a lot more energy and community going for it, improving things, that makes it a better bet in the long run.
In the security area, for instance, there are very good things coming from the TrustedBSD and HardenedBSD branch, getting ported back to FreeBSD.
Re: Docker on FreeBSD
#26The FreeBSD people seem to be on a roll when it comes to porting things. They mention a 64-bit Linux compatibility layer they recently rolled out in this post. But in addition, some iXsystems employees have ported much of the OSF Mach kernel (sans memory object/external pager interface) as a module, plus partial or full implementations of XPC, libdispatch, ASL (Apple System Logger), liblaunch and other facilities jus…
Porting that much of Darwin does seem insane if the goal is just to have launchd. Is there more to it than that?
Re: Docker on FreeBSD
#27The FreeBSD people seem to be on a roll when it comes to porting things. They mention a 64-bit Linux compatibility layer they recently rolled out in this post. But in addition, some iXsystems employees have ported much of the OSF Mach kernel (sans memory object/external pager interface) as a module, plus partial or full implementations of XPC, libdispatch, ASL (Apple System Logger), liblaunch and other facilities jus…
Porting that much of Darwin does seem insane if the goal is just to have launchd. Is there more to it than that?
It's not just to have launchd. They really want to leverage the low-level userspace that OS X uses for dynamic systems and event handling.
Re: Docker on FreeBSD
#28Earlier quoted context omitted.
It's like nobody has ever heard of Capsicum
I believe capsicum is/will be used for sandboxing sshd, ping and tcpdump. Furthermore i know about Security Appliances making use of it, but that's about it, to be honest.
Google uses it extensively. But really, it's the future of security because it's proactive not reactive.
Re: Docker on FreeBSD
#29Earlier quoted context omitted.
http://youtu.be/OXS8ljif9b8 Edit: First 5 Minutes De Raadt speaks about Mitigation Techniques in comparison to other OSs, including FBSD. I fear, this is still true in mid-2015..
FreeBSD has a lot more energy and community going for it, improving things, that makes it a better bet in the long run. In the security area, for instance, there are very good things coming from the TrustedBSD and HardenedBSD branch, getting ported back to FreeBSD. http://www.trustedbsd.org/ http://hardenedbsd.org/ https://en.wikipedia.org/wiki/FreeBSD#Security
Can you provide further details or examples of how these two projects did or do improve FreeBSD's Security? I know for example about ASLR in FBSD 11 coming from Shawn Webb et. al. from the HardenedBSD project..
Re: Docker on FreeBSD
#30The FreeBSD people seem to be on a roll when it comes to porting things. They mention a 64-bit Linux compatibility layer they recently rolled out in this post. But in addition, some iXsystems employees have ported much of the OSF Mach kernel (sans memory object/external pager interface) as a module, plus partial or full implementations of XPC, libdispatch, ASL (Apple System Logger), liblaunch and other facilities jus…
Is this a really long running project? According to [1], GCD (libdispatch) has been there since 8.1. Or is there another implementation being rolled?