Hacker News new | ask | show | jobs
by jgrowl 4311 days ago
I feel like having completely isolated processes is ideal but not always or even usually needed.

I know the phusion/baseimage argues against excessive isolation:

https://github.com/phusion/baseimage-docker#docker_single_pr...