Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #209733

systemd-nspawn (was Re: What is agetty, and why can't it be stopped?)

Show all headers | View raw

On Fri, Jun 07, 2019 at 02:21:52PM -0500, Nicholas Geovanis wrote:
>I just learned earlier today of systemd-nspawn as a possible
>containerization solution (my mind boggles....).

Yes. Systemd's main job is to spawn sub-processes. A container is 
a process run under various constraints. From what I understand nspawn
adds some additional features, but many of the isolation features are
already present in systemd, without nspawn.

>Do you know if removing systemd-sysv would undercut nspawn?

I suspect it would not work at all if you were not running systemd as
the init system.

>Have you tried nspawn for that containerization? Any strong views?

I haven't tried it at all myself yet. I think it looks like a useful tool and
less invasive than e.g. Docker. You can get many of the isolation features of
containers with systemd's features already, without nspawn. See:

    http://0pointer.de/blog/projects/security.html

-- 

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Jonathan Dowland
⢿⡄⠘⠷⠚⠋⠀ https://jmtd.net
⠈⠳⣄⠀⠀⠀⠀ Please do not CC me, I am subscribed to the list.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Re: What is agetty, and why can't it be stopped? bw <bwtnguy@yahoo.com> - 2019-06-07 00:20 +0200
  Re: What is agetty, and why can't it be stopped? Gene Heskett <gheskett@shentel.net> - 2019-06-07 07:30 +0200
    Re: What is agetty, and why can't it be stopped? Jonathan Dowland <jmtd@debian.org> - 2019-06-07 12:30 +0200
      Re: What is agetty, and why can't it be stopped? Gene Heskett <gheskett@shentel.net> - 2019-06-07 17:50 +0200
        Re: What is agetty, and why can't it be stopped? Nicholas Geovanis <nickgeovanis@gmail.com> - 2019-06-07 21:30 +0200
        Re: What is agetty, and why can't it be stopped? Jonathan Dowland <jmtd@debian.org> - 2019-06-07 21:30 +0200
          Re: What is agetty, and why can't it be stopped? Greg Wooledge <wooledg@eeg.ccf.org> - 2019-06-07 21:40 +0200
          Re: What is agetty, and why can't it be stopped? rhkramer@gmail.com - 2019-06-07 23:20 +0200
          Re: What is agetty, and why can't it be stopped? Gene Heskett <gheskett@shentel.net> - 2019-06-08 03:50 +0200
            Re: What is agetty, and why can't it be stopped? <tomas@tuxteam.de> - 2019-06-08 11:00 +0200
              Re: What is agetty, and why can't it be stopped? Étienne Mollier <etienne.mollier@mailoo.org> - 2019-06-08 11:10 +0200
                Re: What is agetty, and why can't it be stopped? Jonathan Dowland <jmtd@debian.org> - 2019-06-08 11:30 +0200
                Re: What is agetty, and why can't it be stopped? andreimpopescu@gmail.com - 2019-06-29 08:50 +0200
              Re: What is agetty, and why can't it be stopped? Gene Heskett <gheskett@shentel.net> - 2019-06-08 17:30 +0200
                Re: What is agetty, and why can't it be stopped? Brian <ad44@cityscape.co.uk> - 2019-06-08 21:30 +0200
        Re: What is agetty, and why can't it be stopped? Nicholas Geovanis <nickgeovanis@gmail.com> - 2019-06-07 21:30 +0200
          Re: What is agetty, and why can't it be stopped? Gene Heskett <gheskett@shentel.net> - 2019-06-08 03:40 +0200
      Re: What is agetty, and why can't it be stopped? Nicholas Geovanis <nickgeovanis@gmail.com> - 2019-06-07 21:30 +0200
        systemd-nspawn (was Re: What is agetty, and why can't it be stopped?) Jonathan Dowland <jmtd@debian.org> - 2019-06-07 22:00 +0200
        Re: What is agetty, and why can't it be stopped? Gene Heskett <gheskett@shentel.net> - 2019-06-08 03:40 +0200

csiph-web