• 3 Posts
  • 457 Comments
Joined 3 years ago
cake
Cake day: June 12th, 2023

help-circle






  • corsicanguppy@lemmy.catoLinux@lemmy.ml•systemd really, really sucks
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    1
    ·
    13 days ago

    most of them citing the unix principle as the main argument.

    It’s like building codes. You don’t always know you need a smoke detector, but we have 6 in this apartment.

    People suggesting the Unix philosophy needs to prove itself have issues incorporating anyone else’s experience into their own. It’s okay, but watch for that oppositional disorder.



    1. Containerization is not a security improvement, since it strongly depends on the sandboxing (and the trends are terrible for that)
    2. Containerization frustrates validation of the installed state of the system. This means you can’t answer “how do you know” when you need to.
    3. Containerization adds a layer of unnecessary tech. I’m not saying it’s a bad thing, just something you don’t need.

    I say this as a former OS security guy for Unix and Linux – like, as a job, working for a very well-known global vendor.