Live data from Hacker News

Launch HN: Nestybox (YC S20) – Containers beyond microservices

news.ycombinator.com

111–112 of 112 posts

Re: Launch HN: Nestybox (YC S20) – Containers beyond microservices

#111

Earlier quoted context omitted.

Unfortunately not. Sysbox requires "true root" privileges, so it can't run inside a system container deployed by Sysbox itself (since that system container would use the user namespace). You can run Sysbox inside a privileged container however, and in fact the Sysbox test framework relies on this heavily. What use case do you envision for running sysbox in sysbox?

No OP but one of my first questions about any layer is “how transparent is it”. If it can’t host itself, it’s clearly not 100% transparent. This matters because it adds cognitive overhead - I have to keep track of which features are available at which layer.

Agreed; it's certainly something we will keep in mind as we mature Sysbox.

Re: Launch HN: Nestybox (YC S20) – Containers beyond microservices

#112

How does Sysbox compare to Podman? (If I remember correctly you can run systemd in a podman container and/or run a podman container with systemd.

Yes, the situation even improved with the latest releases: podman run -ti --security-opt label=disable --security-opt seccomp=unconfined --cap-add SYS_ADMIN --env STORAGE_DRIVER=vfs quay.io/podman/stable sh -c "dnf update -y; podman run hello-world"

Thanks; one thing I may have omitted mentioning is that Sysbox works with the fast overlayfs storage driver, meaning that when you do use it for Docker-in-Docker for example, both the outer Docker and the inner Docker are using overlayfs (as opposed to the slower vfs driver).
Post reply on HN