Hacker News new | past | comments | ask | show | jobs | submit login

It's not a question of size but a question of semantics.

If you dump an OS in a container you are treating it like a lightweight VM (and that might be fine in some/many cases).

If however you restrict it to exactly what you need and it's runtime dependencies + absolutely nothing more then suddenly it's something else entirely - it's process isolation, better yet it's -portable- process isolation.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: