yosh

@fritzvd what I was thinking is chroot is mostly enough; perhaps cgroups to get fancy. Don't know how / what about networking tho.

@fritzvd cgroups kernel docs https://www.kernel.org/doc/Documentation/cgroups/cgroups.txt …

@yoshuawuyts cool. But I agree, that Dockerfile is awkward

@fritzvd yeah, it's super complicated. I just want to be able to isolate processes (b / c easy cleanup) + root fs, haha.

@fritzvd All these specifications seem to want to allow you to configure all the things; for me that's a whole different concern.

@yoshuawuyts are you talking about for dev or prod? I mean that would also make a difference. I've started using lxc containers 2 years ago

@fritzvd both. I'm not an expert on the subject, but looking around it seems nobody really knows what they're doing. Mostly parroting.

@yoshuawuyts pirating?