Date: Fri, 3 Apr 2020 14:37:42 -0700 From: Ihor Antonov <ihor@antonovs.family> To: Alejandro Imass <aimass@yabarana.com> Cc: FreeBSD Questions <freebsd-questions@freebsd.org> Subject: Re: Bastille vs. iocage vs.CBSD opinions? Message-ID: <20200403213742.pdyuuoqudro3qvx4@sea-ll-10936> In-Reply-To: <CAHieY7RWWnWE1iKHj4z5wmSnRgy1LZRMuPPQgW6vfzaxsjv5Og@mail.gmail.com> References: <CAHieY7RWWnWE1iKHj4z5wmSnRgy1LZRMuPPQgW6vfzaxsjv5Og@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 2020-04-03 16:48, Alejandro Imass wrote: > I'm having a hard time picking between these three. > Just want to get a general pulse on the long-time experts here. > No intention to create any flame wars, just objective comments pls. Hey Alejandro, I can't give any advice on CBSD, but here is my 2 cents on iocage vs bastille Iocage: - Written in python, so has bigger dependencies footprint - ZFS only (does not work with UFS) - Uses its own settings files and format, disconnected from jails.conf (this is good and bad, bad if iocage breaks you cant start the jail manually) - Supported by IXSystems ( not 100% sure on this one) - Has a concept of "plugins". "plugins" is a misnomer, in fact this is a way to allow user to provide some input to a deployed image to customize it. My experience with plugins was not very successful. Plugins are expressed in awkward json format without proper documentation (I haven't found any, so if someone knows where to find it - please share) - Core set of features is mature enough to use it in the wild - M.Lucas in his Jails book advocates iocage as one of the recommended tools - supports resouce control with rctl BastilleBSD - Written in shell, zero dependencies if you have shell interpreter :) - Works with UFS and ZFS - AFAIK uses jail.conf to store configuration (not 100% sure) - Has concept of templates, which I find to be much better than iocage's plugins - Less mature, I often encounter bugs or unexpected behaviour. To it's defence the tools is very young, and is being actively developed, new features and fixes are being added every day. It did not exists at the time M.Lucas was writing Jails book. - The author is very responsive and replies to comments and issues on github (same thing can probably be said about iocage, but I personally did not test this) - last time I checked did not support rctl Both tools support VNET jails. Overall you should pick a tool for your task. But if both tools fit I'd recommend trying BastilleBSD as I personally like it's approach better. It might not be a super smooth ride, but you can help improve the tool and give the author first hand feedback ---- Ihor
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20200403213742.pdyuuoqudro3qvx4>