Hi, there's a great tool called "docker", which allows one to easily create jailed linux containers based on images with copy-on-write filesystem.
One of the best things in it, is that the container can be created in seconds from a base image, which you can create yourself. This is a lot faster and easier than using, e.g. debootstrap. The problem is, that I don't see a way to use this thing from inside uwsgi and the emperor. The preferred deployment would look something like emperor launching a docker container based on a predefined image for each vassal (if it does not exist yet). This would be very easy, fast and secure from the user point of view. uWSGI currently has the namespace support as a low-level of jailing the apps, but it would be extremely awesome if it can integrate somehow with the docker's copy-on-write image-based filesystem layer. What do you think of that, guys? Thanks!
_______________________________________________ uWSGI mailing list [email protected] http://lists.unbit.it/cgi-bin/mailman/listinfo/uwsgi
