* Bill Longman <bill.long...@gmail.com> wrote: > Basically just run VMWare/Virtualbox etc and put the services in there.
well, these solutions are way "bigger" (iow: more resource intensive), since they run a complete operation system instance within the virtual machine. > No, chroots are NOT the same. They run on the same system. well, chroots have not much to do with containers (even contains could be said to include chroot as a building block) - they just run certain processes with a different root directory (iow: these processes see just see a subdirectory as it would be the whole filesystem). that's nice for testing porposes or to isolate different kind of isolate programs/libraries (eg. use different libc's, ABIs or calling conventions, 32bit subsystems on an native 64bit host, etc, etc), but don't really add security. cu -- ---------------------------------------------------------------------- Enrico Weigelt, metux IT service -- http://www.metux.de/ phone: +49 36207 519931 email: weig...@metux.de mobile: +49 151 27565287 icq: 210169427 skype: nekrad666 ---------------------------------------------------------------------- Embedded-Linux / Portierung / Opensource-QM / Verteilte Systeme ----------------------------------------------------------------------