Brussels / 3 & 4 February 2024


Using chroots in a single Linux Container as an alternative to docker-compose

StartOS has devised a new strategy for supporting multiple rootfs images for a single application (e.g. nextcloud + postgres). We have elected to do so by creating a single LXC container for the application, that contains each rootfs image, and running each process in a chroot, using bind mounts for special directories such as /proc, /dev, /sys, and /run. This reduces the overhead of multiple containers, but could have drawbacks with respect to compatibility between processes from different distributions, and security within the application. As of the time of this talk, we will have tested an implementation of this strategy, and we will report our findings regarding its advantages and disadvantages.


Photo of Aiden McClelland Aiden McClelland