Jails vs Podman vs VM

At our company, we’ve been building and deploying our products inside 13.4 jails. However, since new customer installations are now running on FreeBSD 15, we no longer have access to 13.4 jails. As a result, the 13.4 builds we create on our own servers do not run on our customers’ newer systems.

Given this situation, we’re evaluating alternatives such as containers (Podman) or virtual machines.

That said, I still prefer jails because their overhead is minimal. For example, a VM typically requires a large zvol, compared to a simple ZFS dataset for a jail.

Has anyone run into a similar situation? How did you solve it?

Leonardo
 
I take it you're referring to thin jails there as thick jails, from what I can work out, aren't that much different in terms of size and resources from podman or docker containers. I'm still working out how to do it, but from what I've read you can even export those to OCI compliant containers these days. I wouldn't personally bother with VMs unless you need the extra level of isolation and/or ability to easily move the VM to a different computer.
 
Thank you all. We are evaluating OCI containers and they look neat from the user point of view, you just pull the container and start on a new server, the same for updates.
But before jumping in, is there a case in favor of jails against containers?.
 
Thanks for the question. I'm struggling to understand the whole Linux containers on FreeBSD myself. I was going to start a thread--and I probably still should--but I'll sit and watch this one.
 
Thanks for the question. I'm struggling to understand the whole Linux containers on FreeBSD myself. I was going to start a thread--and I probably still should--but I'll sit and watch this one.
Yes, the great news since Podman and OCI containers is now we can release FreeBSD based containers, not Linux anymore.
 
I'm sort of in the process of "skipping a release" (-i.e. I'm still on 14.<something> on my servers) so I'm not all that caught up on the OCI stuff, but I really like to create and use scripts to do my setups. Sharing of scripts was always an option too.
 
Back
Top