[tensor]

> The Containerization framework enables developers to create, download, or run Linux container images directly on Mac. It's built on an open-source framework optimized for Apple Silicon and provides secure isolation between container images

That's their phrasing, which suggests to me that it's just a virtualization system. Linux container images generally contain the kernel.

[hackyhacky]

> Linux container images generally contain the kernel.

No, containers differ from VMs precisely in requiring dependency on the host kernel.

[tensor]

Hmm, so they do. I assumed because you pulled in a linux distro that the kernel was from that distro is used too, but I guess not. Perhaps they have done some sort of improvement where they have one linux kernel running via the hypervisor that all containers use. Still can't see them trying to emulate linux calls, but who knows.

[froggit]

> I assumed because you pulled in a linux distro that the kernel was from that distro is used too,

Thst's how docker works on WSL2, run it on top of a virtualised linux kernal. WSL2 is pretty tightly integrated with windows itself, stil a linux vm though. It seems kinda weird for apple to reinvent the wheel for that kind of thing for containers.

[froggit]

> Thst's how docker works on WSL2, run it on top of a virtualised linux kernal. WSL2 is pretty tightly integrated with windows itself, stil a linux vm though. It seems kinda weird for apple to reinvent the wheel for that kind of thing for containers.

Can't edit my posts mobile but realized that's, what's the word, not useful... But yeah, sharing the kernal between containers but otherwise makes them isolated allegedly allows them to have VMesque security without the overhead of seperate VMs for each image. There's a lot more to it, but you get the idea.

[badgersnake]

They usually do contain a kernel because package managers are too stupid to realise it’s a container, so they install it anyway.