A whirlwind tour of systemd-nspawn containers (2025)

lifeisloving

Per the other blog post on docker. Docker Iptable bs has been annoying me for the last 48, hours. It actually makes no sense.

chasil

Eleven years ago, I wrote an introduction to nspawn from a busybox perspective. https://www.linuxjournal.com/content/infinite-busybox-system... I used that for a number of designs before my retirement. The quality of my writing certainly did improve after that was finished.

ectoloph

I have been using systemd-nspawn recently through NixOS containers[1]. The combination feels quite powerful if you are in the ecosystem. Though it is slightly ironic that I find Nix more approachable with the help of LLMs and then Nix has become one of the ways I manage the environments for the LLMs. [1] https://wiki.nixos.org/wiki/NixOS_Containers

noopprod

I found a bug with nspawn that it can't bind mount while being in the mode which lets you delegate namespaces or whatever Aka If you have some kind of mount that matters like NVIDIA, you can't also create containers from containers. So I just switched to LXC but I guess I should submit a slop PR as well. But yeah I guess Id just caution anyone who was going to use it lol