« first day (1357 days earlier)      last day (812 days later) » 

6:54 PM
o/ (keeping the freezer bot away)
 
 
2 hours later…
8:26 PM
I have a question related to Docker : are executables inside a docker image compiled specifically for docker (eg : with some special docker libraries) or are they like regular executables (eg : compiled with standard, default libraries). I am wondering how the isolation work. For example I know there is some programs like Sandboxie which are able to isolate any app at runtime (no need of specific recompile)
 
 
1 hour later…
9:45 PM
Docker isolation is with kernel namespaces and cgroups. You'll have a /lib inside of the image just like you would on the host, and binaries will be compiled for the host architecture since it's a shared kernel.
That said, different base images include different libraries. The most common library issue is using Alpine for a base image with a binary compiled for libc. libmusl isn't a 1:1 replacement for libc.
 
So executables need to be compiled specially for docker right ?
 
10:26 PM
Nope, a significant number of project compile outside of docker and copy the resulting binary in. As long as it was compiled on linux, and the image includes any needed libraries, it will run just fine.
 

« first day (1357 days earlier)      last day (812 days later) »