Hacker News new | ask | show | jobs
by gundy 4743 days ago
They are not really efficient. All they do is add an extra layer of security so you can encapsulate that specific process in a chroot with its own networking stack. Other than that the CPU is still fairshared and the memory still has the same limits as if you ran it without the container. It adds nothing but security.
2 comments

In the cloud, KVM/Xen overhead is considered the baseline so containers are definitely more efficient by comparison.
There are container technologies (openvz, LXC) that offer lot more than "fairshared" to manage resources between containers. Plus the efficiencies of lower "virtualization overhead", because you don't have full OS in containers compared to VMs (consider full VM kernel, VM HW drivers, etc)