Hacker News new | past | comments | ask | show | jobs | submit login

Apples (stow) and oranges (containers and exo-package builders and management).

When using commands in conflict with the installed base combined and with things that should run unmodified, it gets tricky, usually in the form of shim binaries or improper PATH manipulation, to run things sufficiently isolated and predictably.

It's cheap enough and reduces the risks for leaking dependencies to create a chroot/jail/cgroup environment that only includes just enough of a standard environment and its specific dependencies rather than allowing unfettered access to all the things at all times.

Depends on what you're doing whether some things can be shoveled in or need more isolation guarantees.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: