Not to dive too far into the Docker vs full VMs
That’s not true. I have host bridging on my macbook containers (for work) using named networks in my docker-compose stacks. Perhaps you are referring to Docker Desktop, which is limited in its execution (by design)?
The option I’m referencing is quoted here.
The host networking driver only works on Linux hosts, and is not supported on Docker Desktop for Mac, Docker Desktop for Windows, or Docker EE for Windows Server.
This has been a crippling limitation for some time now…
Also not true as you can have multiple docker stacks that are bound to individual NICs and interfaces.
This might be true, but I’m referencing where you’ve bound the networking traffic to the host’s network. At this point, you’re much more constrained and will inherit the same IP address/Mac/etc as the host – aka no multi NIC use-age with designated traffics without some form of VM mapping.
Also also not true. I have HA Core (docker) running on “powerful hardware” (Ryzen7 3700 with 64GB of RAM). The container takes as many resources as it needs. It runs in a separate stack connected to a central swarm across multiple hosts.
Last time I benchmarked Apple’s Virtualization framework, on Apple Silicon devices, Docker was notably resource constrained and didn’t perform nearly as well as full VMs. I might want to revisit/check this.
This one is partially true, but also not. Yes, you do lose some management benefits, but at the same time, there’s an ease of use factor going on as well. The only benefits that I know of that I lose are things like explicit CPU bindings and perhaps some over-simplicated things (like privileged mode execution for containers).
Snapshot states amongst how interfaces work for management are powerful. Docker is also a pain-in-the-a** when it comes to maintaining/updating/etc software. I don’t want to dive too far down this rabbit hole, but I do not have nice things to say to people who call Docker less hands on – Docker is very hands on. I can’t express how many features have broken without any sort of response/updates/communications on macOS from Docker stuff – with no ETAs on fixes and skew on docker version support. These issues rarely happen in a proper VM.
With all that said, it’s been a long time since I’ve used Fusion, but IIRC, you do need to bridge the hypervisor’s internal lan with the host LAN. Otherwise, VMF just swallows the outbound magic packet and it never gets broadcasted.
Yeah, this is where I need to find a solution.
Note, definitely would like to avoid #holywar territory on this front