Containers vs. Zones vs. Jails vs. VMs

Jails are actually very similar to Linux namespaces / unshare. Much more similar than most people in this thread think. There's one difference though: In namespaces, you start with no isolation, from zero, and you add whatever you want — mount, PID, network, hostname, user, IPC namespaces. In jails, you start with a reasonable secure baseline — processes, users, POSIX IPC and mounts are always isolated. But! You can isolate the filesystem root — or not (by specifying /). You…

> A “container” is just a term people use to describe a combination of Linux namespaces and cgroups. Linux namespaces and cgroups ARE first class objects. NOT containers. Amen. Somewhat tangential note: most developers I have met do not understand what a 'container' is. There's an aura of magic and mystique around them. And a heavy emphasis on Docker. A sizable fraction will be concerned about 'container overhead' (and "scalability issues") when asked to move workloads to containers. They are…

I am assumming this is a rant and I know that Jessie knows this stuff. It is just that I cannot handle the patronizing/condescending tone of the post.