Join the discussion
Write your take first — we'll ask for email only when you're ready to publish.
- Hacker News
- Per the other blog post on docker. Docker Iptable bs has been annoying me for the last 48, hours. It actually makes no sense.by lifeisloving
- (2025)by gnabgib
- I found a bug with nspawn that it can't bind mount while being in the mode which lets you delegate namespaces or whatever
Aka
If you have some kind of mount that matters like NVIDIA, you can't also create containers from containers.
So I just switched to LXC but I guess I should submit a slop PR as well. But yeah I guess Id just caution anyone who was going to use it lol
by noopprod - Eleven years ago, I wrote an introduction to nspawn from a busybox perspective.
https://www.linuxjournal.com/content/infinite-busybox-system...
I used that for a number of designs before my retirement.
The quality of my writing certainly did improve after that was finished.
by chasil - I have been using systemd-nspawn recently through NixOS containers[1].
The combination feels quite powerful if you are in the ecosystem.
Though it is slightly ironic that I find Nix more approachable with the help of LLMs and then Nix has become one of the ways I manage the environments for the LLMs.
by ectoloph