Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Microsoft, RedHat, IBM, Docker, Mesosphere, CoreOS and SaltStack join Kubernetes

googlecloudplatform.blogspot.com

Post reply on HN
Print view View original

41–50 of 56 posts

Re: Microsoft, RedHat, IBM, Docker, Mesosphere, CoreOS and SaltStack join Kubernetes

#41

Post by evol262 »

rdtsc wrote: post #24
evol262 wrote: post #9

Earlier quoted context omitted.

Not really. Even in an absolute sense, linux-vserver is/was contemporary with zones. Yes, in the sense that partitioning technology isn't new. zones and jails are comparable to vserver/openvz/lxc. vpars, lpars, and ldoms have analogues on mainframes. Various hypervisor technologies (xen, kvm, vmkernel) are also not unique to solaris, and were done on Linux. What Docker offers that none of these do not is that it's co…

> Docker builds on that, but it's different. So what is different? You wrote whole paragraph about what it isn't. But what is it then that make Docker not just LXC (other container) + scripts to manage applications in it. One could presumable still spawn a single application on any OS...

Docker is application containerization.

While Docker is built on top of libcontainer and cgroups (used to be LXC), traditional containers, including LXC and zones, start init and enough services to look like a "normal" system. You can still use rc.local to manage applications if you want to, I guess.

Docker is a build system for containers which run /bin/foo as PID1, with no services, no ssh, and no init (which presents other problems reaping children, handling sigterm, etc). It's containerization for application virtualization.

Re: Microsoft, RedHat, IBM, Docker, Mesosphere, CoreOS and SaltStack join Kubernetes

#42

Post by jahewson »

stephenr wrote: post #36
gulbrandr wrote: post #34

Earlier quoted context omitted.

I think "This is an exciting time for Gophers." is the reason.

Gophers? Thats what developers who use the Go language call themselves? What's with the ridiculously bad naming/branding in the tech world? * Gophers (the animal) are considered by many to be a pest. * The Docker logo is a whale carrying shipping containers on its back. Shipping containers that go into the ocean are basically unrecoverable/not worth recovering, and whales spend very little of their time on the surfac…

That would be Tiger Airways https://tigerair.com

Re: Microsoft, RedHat, IBM, Docker, Mesosphere, CoreOS and SaltStack join Kubernetes

#43

Post by binarycrusader »

evol262 wrote: post #40
binarycrusader wrote: post #21

Earlier quoted context omitted.

Sorry, but I'm going to disagree. linux-vserver is not contemporary with zones. If you think that it is, you haven't looked at Solaris zones technology very carefully. linux-vserver requires the kernel to be patched; Solaris zones does not. linux-vserver has no clustering or process migration capability; Solaris zones in combination with LDOMs gives you a path for live migration. linux-vserver networking is based on…

It's unreasonable to compare the functionality of zones in 2014 with their functionality in 2005, when vserver was contemporary and the principal containerization solution. In 2014, you'll find that LXC or OpenVZ (or Xen paravirt in some environments) are the preferred virtualization solutions and have been for years, which have every advantage zones have. By "weight" of zones, I mean that they're still effectively S…

How is it unreasonable to compare the functionality of zones in 2014 to linux-vservers which are also under active development in 2014?

You're going to have to provide some actual data to support your assertion that linux-vserver was ever the "principal containerization solution".

LXC and OpenVZ do not have every advantage zones have; zones have other advantages because they're integrated with OS features that only Solaris (and derivative) operating systems have out-of-the-box -- such as ZFS. Which provides the ability to rapidly snapshot, clone and deploy containers. Zones also have other advantages that LXC and OpenVZ do not because of the networking stack features offered in Solaris.

The so-called "weight" of init and basic services is meaningless. But don't take my word for it, just download the Solaris 11.2 Beta and try it for yourself. Theorising about the potential "weight" of init and basic services (which are fairly minimal) is premature optimisation.

As I said before, Docker doesn't provide the full security isolation that Solaris Zones does; I'm sure it's the right style of solution for specific cases, but it is not an appropriate general solution for isolation or containerisation.

Re: Microsoft, RedHat, IBM, Docker, Mesosphere, CoreOS and SaltStack join Kubernetes

#44

Post by binarycrusader »

xorcist wrote: post #32
binarycrusader wrote: post #21

Earlier quoted context omitted.

Sorry, but I'm going to disagree. linux-vserver is not contemporary with zones. If you think that it is, you haven't looked at Solaris zones technology very carefully. linux-vserver requires the kernel to be patched; Solaris zones does not. linux-vserver has no clustering or process migration capability; Solaris zones in combination with LDOMs gives you a path for live migration. linux-vserver networking is based on…

This is not something you agree or disgree with. The Linux technologies mentioned _was_ contemporary, or in specific cases even pre-dates, zones. The rest is just not a one-to-one comparison. The fact that Linux requires the kernel to be patched is a cultural thing. That is how new functionality is distributed in Linux land. Linux-vserver also does not, as you mention, offer comparable functionality. Solaris Zones wo…

Regardless, I disagree with the assertion. linux-vservers barely had their first 1.0 release about a year (2004) before the release of Solaris Zones as a beta. It's likely that the actual development of Solaris zones started around the same time as linux-vservers.

Even if you were to successfully argue that it "predates" Solaris zones -- it doesn't predate them by very much.

The fact that Linux requires the kernel to be patched is not just a cultural thing; it's a very large additional maintenance cost and proves that linux-vserver wasn't valuable to go and stay in the mainline kernel. I spent enough years maintaining Linux servers that required mainline kernel patches (such as a workstation at home) that I grow tired of it.

You can't blame Sun/Oracle for the failure of Linux to produce a completely equivalent technology.

The primary problem is that none of the mainstream Linux distributions have chosen to actually build a fully-architected platform including both the kernel and userland. The OpenStack project is finally forcing some of them to do that, but until they have a filesystem just as capable as ZFS (btrfs someday?), a packaging system that's just as deterministic and capable as IPS (Nix someday?), they'll always be a little bit behind.

Integration matters in the operating system; it makes a huge difference in terms of capability, reliability, and user experience.

In the end, use the right OS for the right job. I happen to believe Solaris is the right OS for servers, but I develop and distribute software for Windows, Mac OS X, Solaris, and Linux as I think they are either great or generally reasonable desktop OS systems.

Re: Microsoft, RedHat, IBM, Docker, Mesosphere, CoreOS and SaltStack join Kubernetes

#45

Post by binarycrusader »

pstuart wrote: post #25
binarycrusader wrote: post #21

Earlier quoted context omitted.

Sorry, but I'm going to disagree. linux-vserver is not contemporary with zones. If you think that it is, you haven't looked at Solaris zones technology very carefully. linux-vserver requires the kernel to be patched; Solaris zones does not. linux-vserver has no clustering or process migration capability; Solaris zones in combination with LDOMs gives you a path for live migration. linux-vserver networking is based on…

All good, except that Solaris is a ghetto.

All good, except you didn't bother posting anything of meaningful value.

In what way, precisely, can Solaris objectively be qualified as what you describe?

Re: Microsoft, RedHat, IBM, Docker, Mesosphere, CoreOS and SaltStack join Kubernetes

#46

Post by xorcist »

binarycrusader wrote: post #44
xorcist wrote: post #32

Earlier quoted context omitted.

This is not something you agree or disgree with. The Linux technologies mentioned _was_ contemporary, or in specific cases even pre-dates, zones. The rest is just not a one-to-one comparison. The fact that Linux requires the kernel to be patched is a cultural thing. That is how new functionality is distributed in Linux land. Linux-vserver also does not, as you mention, offer comparable functionality. Solaris Zones wo…

Regardless, I disagree with the assertion. linux-vservers barely had their first 1.0 release about a year (2004) before the release of Solaris Zones as a beta. It's likely that the actual development of Solaris zones started around the same time as linux-vservers. Even if you were to successfully argue that it "predates" Solaris zones -- it doesn't predate them by very much. The fact that Linux requires the kernel to…

> It's likely that the actual development of Solaris zones started around the same time as linux-vservers.

That's what contemporary means.

> linux-vserver wasn't valuable to go and stay in the mainline kernel.

Lots of technology start out-of-tree and is only much later incorporated into mainline. That's part of what the big Linux distributors do for a living, and a healthy side of the Linux ecosystem.

> none of the mainstream Linux distributions have chosen to actually build a fully-architected platform including both the kernel and userland

For compartmentalization, I take it. It is indeed a problem that it has stayed a niche product in Linux land for so long, but there have been plenty of minor Linux distributors focusing on it, mainly for ISP use.

> In the end, use the right OS for the right job. I happen to believe

I have never in my professional life been in a situation where the operating system was not given by the circumstances. What I believe is simply not relevant. YMMV, of course, and good for you if it does.

Re: Microsoft, RedHat, IBM, Docker, Mesosphere, CoreOS and SaltStack join Kubernetes

#47

Post by pstuart »

binarycrusader wrote: post #45
pstuart wrote: post #25

Earlier quoted context omitted.

All good, except that Solaris is a ghetto.

All good, except you didn't bother posting anything of meaningful value. In what way, precisely, can Solaris objectively be qualified as what you describe?

Meaning that while Solaris had many technical advantages over Linux, it's not exactly a vibrant and growing community. Do you really think that any greenfield endeavor is going to pick Solaris as its OS?

Disclaimer: I just left a gig where I spent 6 years in a Solaris shop, and while there wrote an on-demand zones management system.

Re: Microsoft, RedHat, IBM, Docker, Mesosphere, CoreOS and SaltStack join Kubernetes

#48

Post by evol262 »

binarycrusader wrote: post #43
evol262 wrote: post #40

Earlier quoted context omitted.

It's unreasonable to compare the functionality of zones in 2014 with their functionality in 2005, when vserver was contemporary and the principal containerization solution. In 2014, you'll find that LXC or OpenVZ (or Xen paravirt in some environments) are the preferred virtualization solutions and have been for years, which have every advantage zones have. By "weight" of zones, I mean that they're still effectively S…

How is it unreasonable to compare the functionality of zones in 2014 to linux-vservers which are also under active development in 2014? You're going to have to provide some actual data to support your assertion that linux-vserver was ever the "principal containerization solution". LXC and OpenVZ do not have every advantage zones have; zones have other advantages because they're integrated with OS features that only S…

You're missing the point --

It's not unreasonable to compare the functionality of zones in 2014 with the functionality of vserver in 2014. But you compared the functionality of zones in 2014 with the functionality of vserver in 2005 (which hasn't changed much).

LXC is the preferred container solution and has been for years. I only referenced vserver because of your "Linux finally catching up to zones" comment, when Linux has been doing containerization as long as Solaris.

I'm also not going to "provide any data" about vserver. You can look at the release dates for vserver, openvz, and lxc yourself, as well as when lxc made mainline and how many VPS providers use openvz, versus how many distros even package vserver in 2014.

LXC made mainline for a reason. OpenVZ is pretty comparable in features. You're making a sideways argument now based on Linux not having ZFS, but that isn't the discussion. It's also true that Linux doesn't have Crossbow. It's not true that LXC and OpenVZ can't take advantage of openvswitch, which is pretty comparable. But none of that has anything to do with Docker. This is not "LXC vs Zones vs Jails".

Containers can also be backed by btrfs or lvm cnapshots, which aren't as feature-filled as ZFS, but you're reaching. Similarly, zones aren't as featureful as full-fledged VMs. But that's also not what we're talking about.

You're repeatedly missing what Docker actually does. Ok?

Zones -> LXC. LXC also has "weight" in that it starts init and basic services, and has to be managed.

Docker -> containerized chroot. Docker is not an analogue or competitor to zones.

However, Docker (through libcontainer) are already built on top of cgroups and can be managed through selinux. Security is not a valid complaint.

Re: Microsoft, RedHat, IBM, Docker, Mesosphere, CoreOS and SaltStack join Kubernetes

#49

Post by binarycrusader »

evol262 wrote: post #48
binarycrusader wrote: post #43

Earlier quoted context omitted.

How is it unreasonable to compare the functionality of zones in 2014 to linux-vservers which are also under active development in 2014? You're going to have to provide some actual data to support your assertion that linux-vserver was ever the "principal containerization solution". LXC and OpenVZ do not have every advantage zones have; zones have other advantages because they're integrated with OS features that only S…

You're missing the point -- It's not unreasonable to compare the functionality of zones in 2014 with the functionality of vserver in 2014. But you compared the functionality of zones in 2014 with the functionality of vserver in 2005 (which hasn't changed much). LXC is the preferred container solution and has been for years. I only referenced vserver because of your "Linux finally catching up to zones" comment, when L…

I am not repeatedly missing what Docker does; all I'm pointing out is that Docker is currently insufficient as a true isolation solution from a security and/or other perspectives.

Again, I'm sure Docker is appropriate for some specific situations, but it is not currently an appropriate general container solution if you care about security.

Re: Microsoft, RedHat, IBM, Docker, Mesosphere, CoreOS and SaltStack join Kubernetes

#50

Post by [deleted] »

pstuart wrote: post #47
binarycrusader wrote: post #45

Earlier quoted context omitted.

All good, except you didn't bother posting anything of meaningful value. In what way, precisely, can Solaris objectively be qualified as what you describe?

Meaning that while Solaris had many technical advantages over Linux, it's not exactly a vibrant and growing community. Do you really think that any greenfield endeavor is going to pick Solaris as its OS? Disclaimer: I just left a gig where I spent 6 years in a Solaris shop, and while there wrote an on-demand zones management system.

[deleted]
Post reply on HN