Notices by RGBCube (rgbcube@poa.st)

@mk @theorytoe @bonifartius Systemd is also scenario 1, if you do it properly. Which is done here

@mk @theorytoe @bonifartius Systemd already has cgroups, choosing and protecting kernel modules and anything related to the kernel. You don't need d*cker, as systemd already has EVERYTHING. And you optionally give access to specific ports so it can function properly.

Depends on what you mean containerization, but systemd already does it, ignoring the port usage.

@mk @theorytoe @bonifartius https://github.com/NixOS/nixpkgs/blob/master/nixos%2Fmodules%2Fservices%2Fsecurity%2Fendlessh.nix#L42-L96

Or look at literally ANY file under nixos/services/

@mk @bonifartius @theorytoe Systemd does everything already, look at a random NixOS module that configures it.

I've had it with these docker faggots