Ryan

I’m still onboard with rust as being better than C, however…

My understanding is that it is considerably harder to correctly write unsafe rust than it is to correctly write c, because if you accidentally violate any of safe rust’s guaranteed invariants in an unsafe block, things go bananas.

So what, Japan just colonized most of Asia to spread zen vibes? Or, you know that time Ghengis Khan raped and pillaged his way all the way to Eastern Europe? Or, failing that the repeated wars between Egypt and the Hittites? Even the native Hawaiians fought wars between the islands prior to their colonization. Conquest, genocide and enslavement have been the human condition for all of history everywhere without exception.

Preemptive edit: This doesn’t excuse any of it and we are finally, maybe barely moving past it, but the only reason it seems like this is a western phenomenon is because the most recently globally dominant nations are from there.

Modern optimizing compilers are magical. I would need to check assembly but I would actually expect the if to be hoisted out of the loop entirely to relieve pressure on the branch predictor.

It does. I use this port

I can’t remember exactly what all the pieces are. However, I believe its a combination of

• cgroups: process isolation which is why you can see docker processes in ps/top/etc but you can’t for vms. I believe this is also what gets you the ability to run cross distro images since the isolation ensures the correct shared objects are loaded
• network namespaces: how they handle generating the isolated network stack per process
• some additional mount magic that I don’t know what its called.

My understanding is that all of the neat properties of docker are actuall part of the kernel, docker (and podman and other container runtimes) are mostly just packing them together to achieve the desired properties of “containers”.

I suspect they meant it runs natively in that it’s an aarch64 binary. It’s still running a VM under the hood because docker is really just a nice frontend to a bunch of Linux kernel features.