Received: from mail-il1-f169.google.com (mail-il1-f169.google.com [209.85.166.169]) by nld3-dev1.alpinelinux.org (Postfix) with ESMTPS id 9178678104D for <~alpine/users@lists.alpinelinux.org>; Sun, 28 Jun 2020 22:02:38 +0000 (UTC) Received: by mail-il1-f169.google.com with SMTP id x9so12899064ila.3 for <~alpine/users@lists.alpinelinux.org>; Sun, 28 Jun 2020 15:02:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=J6Ixk23h/M38U07V1RYXT6IE70uc4S1gSwSdO2lC7n0=; b=GDjsOhUPUGahK4mIQyKk38tLO0b+NiGUqyFel4E3aQpUsa+Gu3IOUlNLljT2CO2TKb I0ZJD39F7EblCrPVNe9BN3YodGTm0jAgB3fEPJtS7YMzOlQCCfi8DmS3AErXWjyTOHFg 4UqmYt1+kbQpdOXtriqn1Cs8h41oyui+4dWHhbWIgJph2tHpuveqoxo1VvLkbSnWVTId lcCcnyhpBVaqTFwMW1ny2ms2Ip+rTDaPhtHF6q/YO8vpmVmgbtQq1iQ42zovphUVKOHD 0FPo8XFRT4uJoT0knwyrvrmoR+kH5UWz3lWxsIchdxUYufg9VRYOq2ysiFgntKbEFBle unFw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=J6Ixk23h/M38U07V1RYXT6IE70uc4S1gSwSdO2lC7n0=; b=e1CbaA7LBIhFX7qshOgHeLx5Hg/0TmjS4ULixxx3bP84lxt4FpFbYfu2pFgPdqEYPe f0lhRU/EcG1j3kIm6rGCkSNxJys4FA81BmnN0XbWDMu/a96xhZTsXbw2z8KAdoD3DjUY GIy9vzahIZrIUOWZ1afEjlOZ5km63E4U5NS9Ip9uifNOusOdh/jwChlp6sbeqwonGxhF i0+raZHE1kWc0RnkrhHRv6CLuVpVWWx6WIGi2NB/qhEWTWuTjw9/W1phwSE2eHEX7ttl dBkWQNSCCZvhBz1XnqY5GGhuaxEGGW8pByRfrFSfIwxURFhBUUMdK92xOk2azM7/Rhlg z2BQ== X-Gm-Message-State: AOAM531tp58JbtD+W32QSTv9XUIIbCa3jxKnLmuZuWtkC6XKDEkkqDXF eJtSghprGDCLp69n151G9oT5JY3VTlhYoQgnOe/Esg== X-Google-Smtp-Source: ABdhPJwl0njt95Dji/tu5/XabAB9DHJ8p5tJhxIZQOv8tGhBfJcbK0GcB0gvp/cCoJfK9gC2JK2gXLBQPPMtNMJthoo= X-Received: by 2002:a92:5e95:: with SMTP id f21mr12872228ilg.32.1593381757441; Sun, 28 Jun 2020 15:02:37 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Parke Date: Sun, 28 Jun 2020 15:02:01 -0700 Message-ID: Subject: Re: Running Alpine's userland in a Linux user namespace via lxroot To: "admin@extremeshok.com" Cc: ~alpine/users@lists.alpinelinux.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Sun, Jun 28, 2020 at 1:22 PM admin@extremeshok.com wrote: > Very interesting project. Thanks. > What=E2=80=99s the benefit over using docker ? Don=E2=80=99t need root ac= cess ? Correct, root access not required. But also: (Much?) smaller(?) codebase. Probably also much smaller executable size: A debug build of lxroot is 355KB. Compiled without debugging info, lxroot is 132KB. More transparency? (lxroot makes it easy to know where all the files are. lxroot makes it easy to know which user IDs will be used.) Easy to "share" files (by bind mounting directories) between the host and lxroot environments. Or between two lxroot environments. Conceptually simpler? Fewer moving pieces make lxroot easier to understand= ? The above are mostly guesses, as I have never used Docker. I have tried to use LXC and LXD, but I was never satisfied with the results.