Not a new concept
Posted Nov 1, 2007 15:39 UTC (Thu) by mheily
Parent article: Notes from a container
This is a good feature that provides another layer of security. It's about time that Linux gained this functionality in the mainline kernel. The 'cgroups' concept has been successfully implemented in several other Unix systems. In FreeBSD, this type of container is called a jail and was first published in FreeBSD 4.0 almost seven years ago. In Solaris 10, it is called a zone.
Why couldn't the Linux developers use one of these terms to describe their containers? Better yet, why not import the entire jail(8) subsystem from FreeBSD? This would give Linux a proven design, along with documentation, manpages, header files, and userland tools.
The "not invented here" syndrome strikes again...
to post comments)