systemd-nspawn is presented as a lightweight, Linux namespace-based alternative to Docker, especially useful when full virtual machines are unavailable or too costly, when containers need direct access to host files or hardware such as GPUs, or when Docker is unsuitable. Its key difference is that it generally uses a writable filesystem directory as the container’s root, rather than Docker-style read-only images built from Dockerfiles. The guide frames it as “chroot on steroids” and walks through creating those root filesystems: debootstrap for Debian-family systems, dnf for Fedora, and a purpose-built installer for Alpine. It warns that the usual Alpine chroot installer can bind host directories or mount host devices in hazardous ways, making cleanup and ownership changes risky.
The examples create containers under /var/lib/machines and compare their sizes: Alpine takes about 16 MB, Debian 338 MB, and Fedora 507 MB, with Fedora’s package cache accounting for much of its footprint and Debian shrinking to 305 MB after removing extras. To start a container, the guide uses systemd-nspawn with its root directory and machine name specified, plus private user namespaces that map container IDs to an isolated host range. It explains how to retain that mapping for later access and notes that an initial command provides only a root shell, not a proper persistent deployment. The remaining setup guidance covers basic Debian adjustments and ways to access a running container, including host-side tools, passwords, or SSH, with networking needed for remote access.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
From August 2028, universities in England will pay £925 ($1,200) annually for each international student above an exemption threshold of 220, including current and new students. The government expects the levy to raise revenue for education, while university leaders warn it could strain finances and push up tuition fees. (africa.businessinsider.com)
The Pentagon is developing a plan for major U.S. bases to sustain essential operations independently for 90 days, including power, water, fuel, and communications. Separately, Britain is advising households to keep enough food, water, and cash for three days of disruption; officials say the efforts are not coordinated and do not signal an imminent war. (fortune.com)
“Buy, borrow and die” lets wealthy investors hold appreciating assets, borrow against them instead of selling, and pass them to heirs, who may receive a higher tax basis. The strategy can reduce capital-gains taxes while creating demand for loans secured by investments. (wsj.com)
The US fired an estimated 609 missile interceptors defending Israel from October 2023 through September 2026, including 186 SM-3s and 378 THAADs. The analysis estimates the interceptors cost $11 billion, exceeding Israel’s own use of ballistic-missile defenses. (stephensemler.com)
Microsoft is offering voluntary exits to 60,000 employees at level 70 or below in the U.S., India, Canada, and the UK. The program has prompted speculation that further layoffs are coming, but the post does not confirm that connection. (twitter.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.