Date: Fri, 25 Dec 2020 20:29:06 +0000 From: Steve O'Hara-Smith <steve@sohara.org> To: Tomasz CEDRO <tomek@cedro.info> Cc: FreeBSD Questions Mailing List <freebsd-questions@freebsd.org>, Ameya Deshpande <ameyanrd@yahoo.com> Subject: Re: Network namespaces in FreeBSD Message-ID: <20201225202906.72de7783912e4fb7744aa78c@sohara.org> In-Reply-To: <CAM8r67AdRQxxYjon00%2Bcs0xPaY=AQnQ96jkTqsFf0LzMbD8bPw@mail.gmail.com> References: <SG2PR01MB2443D481AC24AF7207218E0EF1DE0.ref@SG2PR01MB2443.apcprd01.prod.exchangelabs.com> <SG2PR01MB2443D481AC24AF7207218E0EF1DE0@SG2PR01MB2443.apcprd01.prod.exchangelabs.com> <20201223182227.da6c11d3604eb07bb4f18ce5@sohara.org> <A577602D-C1A9-4B6E-822E-03641A4070A0@FreeBSD.org> <2581038e-fa0f-231d-ae33-1b42d50c8600@antonovs.family> <e59209c3-af09-68e9-c78d-ddf70909f354@qeng-ho.org> <25fbf315-7aec-853c-cf69-a805805bd06e@antonovs.family> <9a80d70b-3f37-09ac-825f-c87e2c3e4925@qeng-ho.org> <5d38e65e-98e2-4c27-7ccb-37be93f868df@antonovs.family> <1687992626.3246491.1608839712067@mail.yahoo.com> <20201224201945.c8ce7c55c1ce68d729805a64@sohara.org> <CAM8r67AdRQxxYjon00%2Bcs0xPaY=AQnQ96jkTqsFf0LzMbD8bPw@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 25 Dec 2020 01:44:04 +0100 Tomasz CEDRO <tomek@cedro.info> wrote: > On Thu, Dec 24, 2020, 21:20 Steve O'Hara-Smith wrote: > > > There's a half formed idea which keeps coming back to me not > > really well enough formed to do anything with - imagine being able to > > do something like this: > > > > pkg jail nginx --jail webserver-3 --ip4addr ... > > > > and obtain a jail with just enough in it to run nginx (or > > whatever package you choose) and nothing else - by that I mean not a > > base system with the necessary packages but a system stripped of > > everything but the dependencies of the application - if the application > > doesn't need ls then ls isn't there. > > > > Sounds like a great idea! Also sounds very "BSD Way"^TM.. could be the Thank you - I'll see if I can't get some simple cases going when time permits. > "Fire-and-Forget"^TM alternative of Docker on BSD if bundled > configurations could be also rolled/snapped/deployed that way :-) Packaged configuration sets could be a thing, with the application packages as dependencies so you just install the configuration set. The kind of load balanced, auto-deployed multi layer client-server over auto-configured vpns all from a YAML file magic that docker and kubernetes perform would still be some ways off. -- Steve O'Hara-Smith | Directable Mirror Arrays C:\>WIN | A better way to focus the sun The computer obeys and wins. | licences available see You lose and Bill collects. | http://www.sohara.org/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20201225202906.72de7783912e4fb7744aa78c>