Welcome to OStack Knowledge Sharing Community for programmer and developer-Open, Learning and Share
Welcome To Ask or Share your Answers For Others

Categories

0 votes
339 views
in Technique[技术] by (71.8m points)

docker - Are there any containers running without namespaces and cgroups?

Most container runtimes are based on namespaces and cgroups (docker, lxc, runc). I am wondering if there are on-the-market or open-source containers that are not based on these technologies ? Do you know some names ?

question from:https://stackoverflow.com/questions/65560004/are-there-any-containers-running-without-namespaces-and-cgroups

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome To Ask or Share your Answers For Others

1 Answer

0 votes
by (71.8m points)

Before the introduction of cgroups and namespaces, the isolation consisted to use chroot(). But this was insufficient from a security point of view. As only the file system was isolated. And it is possible to escape from a "chrooted" environment.

This link provides an history of the containerization techniques in the Unix/Linux world.


与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome to OStack Knowledge Sharing Community for programmer and developer-Open, Learning and Share
Click Here to Ask a Question

...