Comment

Comment by frik

I am starting to wonder, why not just execute processes directly with cgroups commands?

  $ cgcreate -g memory,cpu:groupname/foo
  $ cgexec    -g memory,cpu:groupname/foo bash
https://wiki.archlinux.org/index.php/cgroups

It's the bare basic that libvirt and Docker et al are based anyway. So if you want to run just one process per "container" it seems rather logical to keep it simple and use cgroups commands directly. (Similar on Windows, using just sandboxie is so simple. Or do it like Android, execute every app/process with a different user.)

https://en.wikipedia.org/wiki/Cgroups

parent frik 9 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton