Re: OS-level virtualization

["Aaron B." <aaron%zadzmo.org@localhost>]

On Tue, 6 Apr 2021 12:32:46 +0300
Pierre-Philipp Braun <pbraun%nethence.com@localhost> wrote:

> >> What is NetBSD?s analogue (or the closest thing) to Illumos Zones and/or FreeBSD Jails?  Is there anything beyond chroot(2)?
> > 
> > AFAIK no
> 
> Right, well, we still can benefit from, say daemon-level virtualization, 
> as some daemons have the chroot capability built-in.  For example NSD, 
> Postfix have it.  I can only suppose it's a bit stronger than the system 
> chroot.  Is it?
> 

It's just the same chroot system call under the hood. And currently,
that's all there is. The kernel simply doesn't have any other way to
isolate processes at the time.

--
Aaron B. <aaron%zadzmo.org@localhost>