Hacker News new | ask | show | jobs
by zaarn 2872 days ago
Not everything runs great on containers. My internal firewall is a pfSense, BSD based which doesn't run on a linux kernel.

Atleast 3 VMs need patched kernels or more recent kernels/regular kernel updates than the host provides.

Additionally VMs provide a bit more isolation than a simple container (atleast unless you do unpriv'd container).

I do have containers too, about 20 of them, half of them unpriv'd, all of them LXC. Docker is not suitable for my use case at all and frankly I don't think you should suggest someone should switch to Docker without knowing their use cases.