undefined | Better HN

0 pointsvoidz9y ago0 comments

FreeBSD jails, I would think.

0 comments

subway9y ago

See also: Solaris zones.

hinkley9y ago

Yeah when that giant Oracle boat finally turns we are all in for it.

cyphar9y ago

illumos Zones then.

Scramblejams9y ago

Unless I've missed something (and I may have!), FreeBSD's jails have a very respectable security track record. Really, really want to make use of them.

I can't give up Debian's package system, though, so I'm left hoping that kFreeBSD will amount to something someday and I use Xen or KVM in the meantime... :-(

Freaky9y ago

> I can't give up Debian's package system, though

Why not? What would you miss from it?

voltagex_9y ago

I run Debian Testing and FreeBSD 10. I haven't found too much from Debian that I can't get in FreeBSD 10. I could even run a Debian/kFreeBSD jail if I really wanted to.

What really does my head in is that a default Debian install can pull down 2 megabytes a second from a server over SFTP, and a default FreeBSD 10 server can only do ~800 kilobytes per second (FreeBSD 9 was worse).

1 more reply

zxcvcxz9y ago

But do enterprise companies use FreeBSD jails regularly? AFAIK they're basically used as toys by developers.

2trill2spill9y ago

Jails are used on the Playstation 4 and with some 36 Million PS4s sold so far that's a huge use of jails in production. Here's a quote from an article talking about it,

"We can prove the existence of FreeBSD jails being actively used in the PS4's kernel through the auditon system call being impossible to execute within a jailed environment"

This quote is from: https://cturt.github.io/ps4.html

educar9y ago

It's obvious that your parent was talking about servers in production. Isn't this entire thread about that?

j / k navigate · click thread line to collapse

0 comments

subway9y ago