FreeBSD jails
Hacker ApprovedRanked 6 of 14 container runtimes by recommenders
Lightweight, kernel-based isolation built into FreeBSD, with separate network stacks per jail, often recommended over Docker. Critics say onboarding is rough and jails do not support OCI tooling.
Lightweight, kernel-based isolation built into FreeBSD, with separate network stacks per jail, often recommended over Docker. Critics say onboarding is rough and jails do not support OCI tooling.
45 people gave an opinion
- recommend it
- 37
- criticize it
- 8
- approval share
- 82%
Recommended in 11 of 13 months
- November 2025: recommended
- December 2025: recommended
- January 2026: recommended
- February 2026: recommended
- March 2026: recommended
- April 2026: recommended
- May 2026: recommended
- June 2026: not recommended
- July 2026: recommended
- August 2026: recommended
- September 2026: recommended
- October 2026: recommended
- November 2026: not recommended (month in progress)
Why it carries the badge
- 37 people recommend itNeeds 10 or more, met.
- 4.6 recommenders for every criticNeeds 2 to 1 or better, met.
- Recommended in 11 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Lighter, more secure alternative to Docker
“Different processes can need different environments. I advocate for something lightweight like FreeBSD jails.”
Comment from 18 Jan 2026 in “Command-line Tools can be 235x Faster than your Hadoop Cluster (2014)” “You should avoid Docker, is the obvious answer, and grow to love FreeBSD jails.”
Comment from 16 Mar 2026 in “I Love FreeBSD” “Freebsd has since 1999 an more powerful docker alterntive: jails.”
Comment from 25 Nov 2025 in “Ask HN: If Unix gets more popular would you use it instead of Linux?” - Comment from 22 Mar 2026 in “Revert "userdb: add birthDate field to JSON user records”
- Comment from 10 Apr 2026 in “FreeBSD Laptop Compatibility: Top Laptops to Use with FreeBSD”
- Comment from 5 Mar 2026 in “Jails for NetBSD – Kernel Enforced Isolation and Native Resource Control”
Solid, long-proven technology for years
“I've been using jails/etc and the pattern with way I setup and configure my FreeBSD servers hasn't significantly changed in 20 years.”
Comment from 9 Apr 2026 in “FreeBSD Laptop Compatibility: Top Laptops to Use with FreeBSD” “I've always preferred FreeBSD Jails + ZFS to anything Linux has offered.”
Comment from 8 Nov 2025 in “Immutable Software Deploys Using ZFS Jails on FreeBSD” “to me FreeBSD Jails is still the best of the breed”
Comment from 8 Dec 2025 in “Migrating Burningboard.net Mastodon Instance to a Multi-Jail FreeBSD Setup” - Comment from 1 Dec 2025 in “A Love Letter to FreeBSD”
Strong sandboxing for processes
“I think only BSD really has a good sandboxing solution beside linux (jails).”
Comment from 2 Mar 2026 in “Anthropic Cowork feature creates 10GB VM bundle on macOS without warning” “installed BSD systems where we needed strong borders or boxes”
Comment from 28 Aug 2026 in “AI Agent Has Root” “I think the concept of "jails" or sandboxes is quite neat”
Comment from 31 Dec 2025 in “FediMeteo: A €4 FreeBSD VPS Became a Global Weather Service” Integrates well with ZFS
“I've always preferred FreeBSD Jails + ZFS to anything Linux has offered.”
Comment from 8 Nov 2025 in “Immutable Software Deploys Using ZFS Jails on FreeBSD” “Jails, ZFS, pf, bhyve, Dtrace are very well integrated with eachother”
Comment from 1 Dec 2025 in “A Love Letter to FreeBSD” “ZFS and jails are two things FreeBSD does very well”
Comment from 30 Nov 2025 in “A Love Letter to FreeBSD”
What people warn about
Each mark is one comment
Hard onboarding and rough tooling
“FreeBSD jails were technically solid years before Docker existed, but the onboarding story was rough.”
Comment from 22 Feb 2026 in “Back to FreeBSD: Part 1” “FreeBSD jails can't hold a candle to the ease of use and developer experience OCI tooling offers.”
Comment from 22 Feb 2026 in “Back to FreeBSD: Part 1” “it was a bit hit and miss to get it working”
Comment from 11 Oct 2026 in “Telegram Desktop vulnerability allowed any user's file to be stolen” Shares host kernel, escape concerns
“the FreeBSD kernel is highly vulnerable to processes running as root within a Jail”
Comment from 22 Jan 2026 in “SmartOS” “How many FreeBSD's jail escapes did we have in the last 20 years?”
Comment from 12 Oct 2026 in “Telegram Desktop vulnerability allowed any user's file to be stolen” “jails have the same limitation — shared host kernel”
Comment from 1 Apr 2026 in “Back to FreeBSD – Part 2 – Jails” No OCI support or package library
“last I checked there’s no deep and up-to-date library of “packages” I can reach for, using jails”
Comment from 22 Feb 2026 in “Back to FreeBSD: Part 1” “Jails are great but are not OCI-compliant.”
Comment from 7 Nov 2025 in “Swift on FreeBSD Preview” “FreeBSD jails come close but still no.”
Comment from 23 Apr 2026 in “Arch Linux Now Has a Bit-for-Bit Reproducible Docker Image”
Other container runtimes people recommend
The four most recommended other container runtimes, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
| Product | Recommend | Criticize | Approval | Months | Owned | Badge |
|---|---|---|---|---|---|---|
| Podman | 276 | 93 | 75% | 12 | 1.5 yrs21 owners | Approved |
| OrbStack | 97 | 11 | 90% | 12 | 2 yrs3 owners | Approved |
| Apple container | 56 | 28 | 67% | 11 | — | Approved |
| gVisor | 45 | 16 | 74% | 12 | — | Approved |
| FreeBSD jailsThis page | 37 | 8 | 82% | 11 | — | Approved |
What people said
40 of the 53 comments that mention it, newest first. Each links to the original comment.
“How many FreeBSD's jail escapes did we have in the last 20 years?”
“it was a bit hit and miss to get it working”
“installed BSD systems where we needed strong borders or boxes”
“Free BSD Jails are great! I use them on https://www.nearlyfreespeech.net/ and they work well.”
“Solaris Zones and FreeBSD Jails (their inspiration) also share a kernel with the running system and do not seem to have as many escape vulnerabilities.”
“FreeBSD jails come close but still no.”
“Solaris zones and FreeBSD jails were nice but they always were let's say a bit too bearded”
“Jails is far superior to the kludge that is docker.”
“I've been using jails/etc and the pattern with way I setup and configure my FreeBSD servers hasn't significantly changed in 20 years.”
“I use FreeBSD jails and get a lot of value out of separate network stacks for each”
“jails have the same limitation — shared host kernel”
“everything would run in a much secure way than docker defaults”
“If there is some service you really can't manage to get running with jails”
“You should avoid Docker, is the obvious answer, and grow to love FreeBSD jails.”
“that becomes painful instead when needing newer versions of the application”
“but you can't say, "Here process, have your standard IO streams and nothing more. Go forth and compute."”
“far easier to maintain, lighter and more secure”
“I think only BSD really has a good sandboxing solution beside linux (jails).”
“last I checked there’s no deep and up-to-date library of “packages” I can reach for, using jails”
“It's a 5 line configuration file to create a FreeBSD jail.”
“FreeBSD jails can't hold a candle to the ease of use and developer experience OCI tooling offers.”
“FreeBSD jails were technically solid years before Docker existed, but the onboarding story was rough.”
“I prefer to do that locally using FreeBSD Jails”
“the FreeBSD kernel is highly vulnerable to processes running as root within a Jail”
“Missing FreeBSD jails in 2026 is kind of weird”
“Different processes can need different environments. I advocate for something lightweight like FreeBSD jails.”
“Between ZFS snapshots and Jails, Solaris really was skating to where the puck was going to be.”
“I think the concept of "jails" or sandboxes is quite neat”
“to me FreeBSD Jails is still the best of the breed”
“Jails are absolutely fantastic.”
“Jails, ZFS, pf, bhyve, Dtrace are very well integrated with eachother”
“ZFS and jails are two things FreeBSD does very well”
“Freebsd has since 1999 an more powerful docker alterntive: jails.”
“FreeBSD jails and their vnets are amazingly good.”
“put the Linux binary (prefereably the musl/alpine one) in a thin jail it usually works”
“You will pick up jails for container use cases in 10 minutes and will never want to go back”
“I've always preferred FreeBSD Jails + ZFS to anything Linux has offered.”
“Jails and ZFS are amazing tech but they are not accessible .”
“Jails are great but are not OCI-compliant.”
“I have stuff like Nextcloud in my jails, and wouldn't want to install PHP and all of it's deps outside the dedicated filesystem of the jail.”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.