Hacker News new | ask | show | jobs
by mst 1951 days ago
There's a bunch of scripting around them, but the point is more around the isolation - jails are properly isolated in a way that containers are (explicitly) not designed to be.

bastille among others try to provide a nice UX atop them, but the important thing is that jails are strictly more powerful (on FreeBSD a jail can have its own network stack, while still running on the same kernel, for example)

I dunno about 'superior' but jails are very definitely different and provide a bunch of features containers don't.