top | item 46191791

(no title)

rokkamokka | 2 months ago

If I set this up i would just run every service on the same machine sans jails. Are there any practical benefits to doing it like this? The extra complexity buys some slight measure of security in case one service is exploited, I guess?

discuss

order

t_tsonev|2 months ago

Isolation is certainly one big reason to use jails. You also get independent management of dependencies, and can optionally share the base system.

They're somewhat similar to how you'd use Docker containers on Linux, but have different approach to security and networking.

Nikkau|2 months ago

If you use *BSD, you have to use jails, it's just law