undefined | Better HN

0 pointstyingq5y ago0 comments

If technically best in the container space mattered, Illumos would be everywhere...

0 comments

3 comments · 2 top-level

tptacek5y ago· 1 in thread

People say this a lot too, but Illumos also uses shared-kernel isolation. Linux + gVisor is probably (significantly) superior to it as far as security goes.

yjftsjthsd-h5y ago

90%+ of Docker users aren't using gVisor; I don't disagree that it's good, but it feels like an aside.

cestith5y ago

Or z/OS

j / k navigate · click thread line to collapse