1. 4
  1.  

  2. 2

    What does it even mean to run a container on bare metal? Do I get to provide my own kernel? Can I poke PCI registers?

    This sounds like rebranded zones/jails/etc. if I’m sharing the host OS kernel with anybody else, that’s a tremendous amount of attack surface.

    1. 2

      Illumos Zones are the underlying tech for Triton, yeah. Afaict Joyent uses “bare metal” as shorthand for “not on top of Xen/KVM style virtualized hardware”. Their main goal in pushing that term seems to be to differentiate their platform from Amazon AWS.

      1. 1

        Triton runs docker images in a linux branded zone. It’s not rebranded zones, zones is the underlying technology and Triton offers a docker-compatible API.