jails and zones

fluca1978

fluca1978

Hi all,
I'm quite new to FreeBSD and I'd like to know what are advantages/drawbacks and other important differences (if any) between jails and solaris zones. If I get it right, jails cannot be branded (i.e. they are running always a freebsd installation) while zones can run other kernels, is it the only difference?

Thanks
 
Dunno about solaris, but in FreeBSD currently jails are served with same kernel as host system, so jail user cannot switch kernel or install own version or anything. But each jail have own world, so user can mess with it
 
fluca1978 said:
Sorry, I was not meaning a different Solaris kernel, I was referring to branded zones, so you can have a solaris zone running a linux kernel (so a different kernel).
Click to expand...

Wrong again.

A zone is an emulation layer, more akin to Wine perhaps, but at a more fundamental level. This, for example, means that an lx branded zone does not contain its own Linux kernel; rather, the kernel calls are redirected by the zone's emulation layer to the underlying Solaris kernel.
Click to expand...
http://www.linuxjournal.com/magazine/solaris-zones-linux-it-marbles-get-new-bag
(emphasis mine)
 
I had some fun playing with zones :) .

Zones were introduced in solaris 10. One advantage people can gain is that they can run older versions of solaris, like 8/9, in a zone inside solaris 10 (but only in case of sparc, not intel).

One interesting advantage of zones I have seen is that some big corps/banks who buy enterprise class sparc hardware and their software licenses can not meet the requirements of that hardware (normally CPU limit) then they create a zone with number of CPUs they are authorized to use and install apps in that.

Zones also have some advantages when used with ZFS, like quota etc (solaris soft partitions can be also used to implement quota on zone). not sure how FreeBSD jails are this area.

You can also export a raw device inside a zone. which I guess is not possible in case of a jail.

I think Jail will improve with time and it will beat solaris zones, because it's very doubtful that oracle will invest in all previous sun projects, specially sparc related.

FreeBSD rocks.
 
Zones were introduced in solaris 10. One advantage people can gain is that they can run older versions of solaris, like 8/9, in a zone inside solaris 10 (but only in case of sparc, not intel).
Click to expand...

You can always install an old world inside a jail. I've never tried, but I don't see where it would break. If you need a jail with an old kernel, you're out of luck.

One interesting advantage of zones I have seen is that some big corps/banks who buy enterprise class sparc hardware and their software licenses can not meet the requirements of that hardware (normally CPU limit) then they create a zone with number of CPUs they are authorized to use and install apps in that.
Click to expand...

You can use cpuset -j for that. sysutils/ezjail has code for automating this.

You can also export a raw device inside a zone. which I guess is not possible in case of a jail.
Click to expand...

A device is just a file, if you mount /dev inside your jail, it will have access to this device. The default FreeBSD ruleset for devfs inside a jail is rather restrictive, you can loosen that.

Zones also have some advantages when used with ZFS, like quota etc (solaris soft partitions can be also used to implement quota on zone). not sure how FreeBSD jails are this area.
Click to expand...

If you're talking about disk quota, then you can use jails on ZFS and reap the same advantages. CPU or network quotas are something else, unfortunately...
 
Fred said:
If you're talking about disk quota, then you can use jails on ZFS and reap the same advantages. CPU or network quotas are something else, unfortunately...
Click to expand...

Standard UFS quotas also work in FreeBSD 8 (previous versions work with a simple patch) across jails assuming you've sync'd UID/GID across host/jails and have matching /etc/fstab. Net quotas can be achieved with fib's running through ipfw (maybe PF too).
 
You must log in or register to reply here.
Back
Top