Comment

Comment by sneak

These are privileged containers that can mount things and change kernel settings and do real virtualization.

What is the point, then, of doing all this in docker containers? If you're virtualizing with qemu anyway then why containerize?

I was expecting something like software (non-kvm) emulation in a userspace process in an unprivileged container, or perhaps UML, real brain-in-a-jar stuff.

parent sneak 4 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton