Top all-time · #365
Jessie Frazelle
Personal blog · blog.jessfraz.comsystemssecurityhardware
Jessie Frazelle writes Ramblings from Jessie, a personal blog at blog.jessfraz.com about systems, security and hardware. Since 2015, 146 different Hacker News readers have linked it 203 times, most often “Docker Containers on the Desktop”. It is still writing: the last post was on 2026-09-10, and you can follow it by feed.
Sometimes recommended · 11 of 40 sampled comments recommend it?
Why HN links it
HN readers link Jessie Frazelle's blog for container and sandboxing posts (Docker, containers vs zones and jails, Chrome in containers) and as a favorite for low-level security writing.
- Recommended for · 11 comments
- Commenters call it a favorite and a talented blog, and praise its BPF overview and container-security posts.
Summarised by Claude from a sample of 40 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
The blog of Jessie Frazelle, hacker of all things: systems, kernels, operating systems, etc...
Most-linked posts?
- Docker Containers on the Desktop26 people · 29 mentions · first linked 2015-05-19
- Containers vs. Zones vs. Jails vs. VMs12 people · 14 mentions · first linked 2017-03-28
- /11 people · 12 mentions · first linked 2017-01-20
- Getting Towards Real Sandbox Containers9 people · 11 mentions · first linked 2016-05-02
- Born in a Garage8 people · 8 mentions · first linked 2019-12-02
- The Art of Closing5 people · 5 mentions · first linked 2016-06-04
- The New Golden Age of Building with Soul4 people · 6 mentions · first linked 2019-02-13
- Open source firmware is important for security4 people · 4 mentions · first linked 2019-05-08
- Building Container Images Securely on Kubernetes4 people · 4 mentions · first linked 2018-03-21
- Defining a Distinguished Engineer4 people · 4 mentions · first linked 2019-03-29
What Hacker News says?
False, https://blog.jessfraz.com/post/containers-zones-jails-vms/ .
Comment linking /post/containers-zones-jails-vms/
on “Apple Plans to Use Its Own Chips in Macs from 2020, Replacing Intel”Submitted Containers vs. Zones vs. Jails vs. VMs as a story · 714 points
HN discussionIt's also possible to run a web browser in a docker container which can be interacted with on the host OS. This avoids the permissions issues with solutions like firejail: https://blog.jessfraz.com/post/docker-containers-on-the-desk...
Comment linking /post/docker-containers-on-the-desktop/
on “Why Is This Website Port Scanning Me?”Submitted Open source firmware is important for security as a story · 615 points
HN discussionAnother really good read about containers, jails and zones. https://blog.jessfraz.com/post/containers-zones-jails-vms/
Comment linking /post/containers-zones-jails-vms/
on “Apple announces Foundation Models and Containerization frameworks, etc”Submitted Windows for Linux Nerds as a story · 615 points
HN discussionI saw a trick where you can run Chrome and give it less memory, and it uses less memory. This is done using cgroups. The blog post is somewhat old[1] and not in sync with the version that is in Git[2], you might find a way to do this without Docker (I was using an old version of Docker and kernel that couldn't get it to work. But I need the old version of Docker for reasons.) Chrome will aggressively consume any mem…
Comment linking /post/docker-containers-on-the-desktop/
on “PhantomJS: Stepping down as maintainer”Submitted Books I Recommend as a story · 597 points
HN discussiondepending on your OS of choice, desktop containers using something like docker (e.g. https://blog.jessfraz.com/post/docker-containers-on-the-desk... ) can achieve it and are a reasonably straightforward (for a certain value of straightforard) option (linux only unfortunately...)
Comment linking /post/docker-containers-on-the-desktop/
on “Container Tabs”Submitted For the Love of Pipes as a story · 506 points
HN discussionanother way to use chrome in a sandbox https://blog.jessfraz.com/post/docker-containers-on-the-desk...
Comment linking /post/docker-containers-on-the-desktop/
on “Container Tabs”Submitted LD_PRELOAD: The Hero We Need and Deserve as a story · 352 points
HN discussionThis is such a great thread, I'm excited to begin reading quite a few of the linked blogs (such as this one: https://acoup.blog/ ). These ones are some of my favorites: - www.wall.org/~aron/blog/ (physics, theology, history, philosophy) - http://xahlee.info/ (math, emacs, keyboards, etc.) - https://matt.might.net/articles/ (academy, compsci, etc.) - https://www.joelonsoftware.com/ (programming, companies, etc.) - ht…
Comment linking /
on “Ask HN: Favorite Blogs by Individuals?”Submitted Containers vs. Zones vs. Jails vs. VMs (2017) as a story · 351 points
HN discussionMiscellaneous technical stuff: - https://danluu.com/ - https://blog.jessfraz.com/ - https://adamwathan.me/ - https://jvns.ca/ - https://rachelbythebay.com/w/ - https://dankim.org/ - https://mtlynch.io/ - https://rgz.ee/ - https://markdotto.com/ - https://thorstenball.com/ - https://sarahdrasnerdesign.com/writing/ - https://lukesmith.xyz/ - Quirky minimalist linux & free software stuff. I don't agree with many of his…
Comment linking /
on “Ask HN: Favorite Blogs by Individuals?”Submitted This Industry is Fucked as a story · 308 points
HN discussionIn this post the author links to one of her previous posts[0], where she wrote: > As a proof of concept of unprivileged containers without cgroups I made binctr. Which spawned a mailing list thread for implementing this in runc/libcontainer. Aleksa Sarai has started on a few patches and this might actually be a reality pretty soon! Does anybody know if this made it into runc/libcontainer? I'm not an expert on these…
Comment linking /post/getting-towards-real-sandbox-containers/
on “Containers vs. Zones vs. Jails vs. VMs”Submitted You might not need Kubernetes as a story · 307 points
HN discussionMaybe you already saw this: https://blog.jessfraz.com/post/docker-containers-on-the-desk... It's pretty dated, but the state of containers has only improved since 2015, and this was usable for Google Hangouts (video) and YouTube all the way back then. https://hub.docker.com/r/jess/chrome/ ^ This got a push less than 24 hours ago https://github.com/jessfraz/dockerfiles/blob/master/chrome/s... ^ This is the Dockerfile…
Comment linking /post/docker-containers-on-the-desktop/
on “Getting Started with Headless Chrome”Submitted Redoing all my home networking as a story · 304 points
HN discussion> my impression is security is a huge kludge Docker itself could be called a huge kluge, at least compared to Solaris 'zones' and FreeBSD 'jails'. They're similar to containers, but are supported directly by the kernel, whereas Docker has to pull together different kernel features to create its abstraction. [0] > What's to stop some state agency inserting its code into the core? No way to review everything 1. This i…
Comment linking /post/containers-zones-jails-vms/
on “Show HN: CLI tool for saving web pages as a single file”Submitted Defining a Distinguished Engineer as a story · 292 points
HN discussionI really love Jesse Frazelle's[1] blog. She posts things about low-level (firmware/open-hardware/system) security. Her work is already well known here on HN[2]. A few more of my fav: The grugq (NatSec, Tradecraft, OpSec): https://gru.gq/ Pinboard (aka Maciej Cegłowski): https://idlewords.com/ Adam Aelkus: https://aelkus.github.io/ Bert Hubert: https://berthub.eu/ ____ [1] https://blog.jessfraz.com/ [2] https://news.…
Comment linking /
on “Ask HN: What are good solo developer blogs that you enjoy reading?”Submitted Docker containers on the desktop as a story · 267 points
HN discussionYep, I would agree with all of this. Some Oxide folks have talked about our experiences with Rust as web backend stuff, it's linked in the post but https://blog.jessfraz.com/post/the-automated-cio/ and https://twitter.com/ahl/status/1308421852931461126 We had to build a bunch of stuff because as you say, the ecosystem isn't super mature at times.
Comment linking /post/the-automated-cio/
on “Rust After the Honeymoon”Submitted Ultimate Linux on the Desktop as a story · 212 points
HN discussionJessie Frazelle : https://blog.jessfraz.com - Funny, culturally aware, and works with a lot of things that are going to be shaping our world. Also, @jessfraz
Comment linking /
on “Ask HN: Which developers do you closely follow?”Submitted Born in a Garage as a story · 202 points
HN discussionThere were three large threads. We merged them. The other URLs: https://blog.jessfraz.com/post/born-in-a-garage/ http://dtrace.org/blogs/bmc/2019/12/02/the-soul-of-a-new-com... Comments about the garage were probably in response to the jessfraz.com post. Other than that I didn't see any merged comments that were specific to one URL.
Comment linking /post/born-in-a-garage/
on “Oxide Computer Company: Initial boot sequence”Submitted Linux Observability with BPF as a story · 193 points
HN discussion
