Hacker News new | ask | show | jobs
by lima 2951 days ago
Legitimately curious: the main issue with running containers on Linux is the bad state of the Linux kernel as far as security is concerned. Even with SELinux, it's risky to run multi-tenant containers on Linux due to the massive attack surface, necessitating things like [1] or lightweight VMs.

How does SmartOS solve this?

Also, does the Joyent stack have an OpenShift equivalent? Triton wants my credit card details to sign up with their public cloud, but I might grab a spare box and give it a try.

[1]: https://github.com/google/gvisor

1 comments

https://news.ycombinator.com/item?id=17067854

...if after reading that you still have specific questions, ask.

You don't need a credit card, if you don't want to run it on Joyent's servers, you can run Triton for free on your own at home, at work, (or someone else's) infrastructure. All of that technology is freely available at Github at no cost other than reading a little bit of documentation and investing some time to set it up following the instructions.

Out of curiosity, do Digital Ocean, Hetzner, Azure or AWS not ask for a credit card?

What exactly did I write above, that made you so angry? I’m baffled.