Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Apples and oranges.

Among many other things, Docker (and Podman etc) has

1. Images and OverlayFS

2. Networking

3. User namespace mappings

4. Resource management

---

If all you want is file system isolation, then docker (and postman, etc) is massive overkill chroot is correct.



*podman, etc




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: