<story><title>Container Linux on the Desktop [slides]</title><url>https://docs.google.com/presentation/d/17Hml1iFqdXElxOcrh9caQSC5px5mDgaS015Vhaz42ZY</url></story><parent_chain><item><author>xte</author><text>In my own personal opinion container idea is &amp;quot;meh&amp;quot; and today&amp;#x27;s usage trends are AWFUL. They serve a sole real purpose, open door to proprietary software on GNU&amp;#x2F;Linux destroying it&amp;#x27;s community model.&lt;p&gt;You can&amp;#x27;t run unsafe software in safety, it&amp;#x27;s a myth. Or worse is giving trust to a specific tech and so ignore both it&amp;#x27;s potential mistrust and other software security implications.&lt;p&gt;The future for me is Nix{,OS}&amp;#x2F;Guix{,SD} certainly not &amp;quot;chroots&amp;quot;&amp;#x2F;&amp;quot;jails&amp;quot;&amp;#x2F;&amp;quot;zones&amp;quot;&amp;#x2F;&amp;quot;lpar&amp;quot;&amp;#x2F;*.</text></item></parent_chain><comment><author>zerogvt</author><text>I agree but in containers&amp;#x27; defense they weren&amp;#x27;t supposed to be about security in the first place. In my understanding the main incentive for the huge push behind them was immutability and them being microservices-friendly technology.</text></comment>
<story><title>Container Linux on the Desktop [slides]</title><url>https://docs.google.com/presentation/d/17Hml1iFqdXElxOcrh9caQSC5px5mDgaS015Vhaz42ZY</url></story><parent_chain><item><author>xte</author><text>In my own personal opinion container idea is &amp;quot;meh&amp;quot; and today&amp;#x27;s usage trends are AWFUL. They serve a sole real purpose, open door to proprietary software on GNU&amp;#x2F;Linux destroying it&amp;#x27;s community model.&lt;p&gt;You can&amp;#x27;t run unsafe software in safety, it&amp;#x27;s a myth. Or worse is giving trust to a specific tech and so ignore both it&amp;#x27;s potential mistrust and other software security implications.&lt;p&gt;The future for me is Nix{,OS}&amp;#x2F;Guix{,SD} certainly not &amp;quot;chroots&amp;quot;&amp;#x2F;&amp;quot;jails&amp;quot;&amp;#x2F;&amp;quot;zones&amp;quot;&amp;#x2F;&amp;quot;lpar&amp;quot;&amp;#x2F;*.</text></item></parent_chain><comment><author>ngcazz</author><text>Do you have any data to back up your assertion? Not being facetious here, really would like to understand these downsides.&lt;p&gt;To be honest I think it unfair to ignore the fact that you can build your own containers to leverage dependency isolation, or to deploy through an orchestration engine ie. Kubernetes.</text></comment>