Embed Notice

@mk @RGBCube @theorytoe
i have to do some drywall now, so i'll keep it short:

- namespaces are a copy of a plan9 idea to have composable environments, isolation is a side effect.

- cgroups limit resource usage, might be worthwhile to prevent some daemon going crazy. otoh there already were things in place for that like umask.

- chroot is no "container feature". postfix chroots by default, so do many other daemons. you still need good user/group structure and appropriately set permissions in any case.

all of these things are usable without resorting to docker. @RGBCube explained how a distribution can use the same features with it's packages.

side note: you using words like "retard" and "faggot" while shilling docker which frequently has pride events borders on the comedic.