{"slug": "bastille", "name": "Bastille", "category": "infra", "category_name": "Infrastructure and DevOps", "description": "", "recommenders": 5, "commenters": 7, "warners": 1, "score": 3.623, "rising": -1.64, "first": "2025-11-02", "latest": "2026-04-07", "why": "I\u2019ve found Bastille really simple and great for creating and managing jails", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 5, "neutral": 1, "compare": 0, "warn": 1}, "spark": [2, 0, 0, 1, 1, 1, 0, 0, 0, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "I\u2019ve found Bastille really simple and great for creating and managing jails", "kind": "", "icon": true, "domain": "bastillebsd.org", "github_repo": null, "official_url": "https://bastillebsd.org", "pricing": "", "aliases": ["Bastille"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 762967281, "item_id": 47685455, "url": "https://news.ycombinator.com/item?id=47685455", "by": "ggm", "date": "2026-04-07", "version": null, "stance": "recommend", "quote": "I use bastille, and it seems to \"just work\"", "excerpt": "I don't personally like proxies, intermediaries, but that said they've been entirely normalised by kubernetes/traefik/haproxy type setups. I do find managing the bridge pseudo-devices, and the various bindings, and DHCP/SLAAC a bit painful because I actually don't understand it well. I use bastille, and it seems to \"just work\" and I looked at Sylve and it had huge potential. When I ask for some ELI5 on bridge/net stu", "context": "", "use_case": "FreeBSD jail management", "switched_from": "", "story": "Cells for NetBSD: kernel-enforced, jail-like isolation"}, {"id": 756231152, "item_id": 47264447, "url": "https://news.ycombinator.com/item?id=47264447", "by": "lateralux", "date": "2026-03-05", "version": null, "stance": "recommend", "quote": "I\u2019ve found Bastille really simple and great for creating and managing jails", "excerpt": "I\u2019ve found Bastille really simple and great for creating and managing jails https://bastillebsd.org/", "context": "", "use_case": "FreeBSD jail management", "switched_from": "", "story": "Jails for NetBSD \u2013 Kernel Enforced Isolation and Native Resource Control"}, {"id": 753799200, "item_id": 47112450, "url": "https://news.ycombinator.com/item?id=47112450", "by": "craftkiller", "date": "2026-02-22", "version": null, "stance": "recommend", "quote": "Bastille offers a pretty much identical workflow to docker, but built on FreeBSD jails", "excerpt": "If you don't want to use the base system (which docker is NOT the base system on Linux) then Bastille offers a pretty much identical workflow to docker, but built on FreeBSD jails: https://github.com/BastilleBSD/bastille > I don\u2019t know why i keep hearing about jails being better Jails have a significantly better track record in terms of security. I can delegate a ZFS dataset to a jail to let the jail manage it. Do Li", "context": "", "use_case": "FreeBSD jail management", "switched_from": "", "story": "Back to FreeBSD: Part 1"}, {"id": 733690352, "item_id": 45855647, "url": "https://news.ycombinator.com/item?id=45855647", "by": "righthand", "date": "2025-11-08", "version": null, "stance": "recommend", "quote": "Bastille has \u201ctemplates\u201d: https://bastillebsd.org/templates/", "excerpt": "Bastille has \u201ctemplates\u201d: https://bastillebsd.org/templates/", "context": "", "use_case": "FreeBSD jail management", "switched_from": "", "story": "Immutable Software Deploys Using ZFS Jails on FreeBSD"}, {"id": 733689968, "item_id": 45855623, "url": "https://news.ycombinator.com/item?id=45855623", "by": "righthand", "date": "2025-11-08", "version": null, "stance": "recommend", "quote": "I highly reccomend installing Bastille FreeBSD instead", "excerpt": "If you want to do this kind of thing but don\u2019t like the looks of this indepth tutorial, I highly reccomend installing Bastille FreeBSD instead and let the bastille tooling do the heavy lifting of managing zpool cloning and what not. Their getting started tutorial should get you 90% of the way there and has Docker like tooling. [0] Also found this self host on a Raspberry Pi helpful.[1] [0] https://bastillebsd.org/get", "context": "", "use_case": "FreeBSD jail management", "switched_from": "", "story": "Immutable Software Deploys Using ZFS Jails on FreeBSD"}]}], "caveats": [{"label": "", "summary": "", "quotes": [{"id": 734593152, "item_id": 45912072, "url": "https://news.ycombinator.com/item?id=45912072", "by": "solid_fuel", "date": "2025-11-12", "version": null, "stance": "warn", "quote": "They're still considered experimental so I wouldn't run it for production", "excerpt": "Makes sense, out of curiosity have you tried the linux jails that Bastille offers? [0] They're still considered experimental so I wouldn't run it for production but I wonder how well .Net would run in one. The whole container could be a zfs dataset, which would be interesting. [0] https://docs.bastillebsd.org/en/latest/chapters/gettingstarted.html#linux-jail", "context": "", "use_case": "FreeBSD jail management", "switched_from": "", "story": "A brief look at FreeBSD"}]}], "who": [], "tags": [], "use_cases": ["freebsd jail management", "freebsd jail provisioning"], "compared": [{"slug": "freebsd", "name": "FreeBSD", "co": 3, "switched_from": 0, "switched_to": 0}, {"slug": "docker", "name": "Docker", "co": 2, "switched_from": 0, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=45899189", "title": "A brief look at FreeBSD", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=45852895", "title": "Immutable Software Deploys Using ZFS Jails on FreeBSD", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=47680532", "title": "Cells for NetBSD: kernel-enforced, jail-like isolation", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47258641", "title": "Jails for NetBSD \u2013 Kernel Enforced Isolation and Native Resource Control", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47108989", "title": "Back to FreeBSD: Part 1", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=45789424", "title": "Using FreeBSD to make self-hosting fun again", "mentions": 1}], "sentiment_by_month": {"2025-11": {"recommend": 2, "warn": 1, "neutral": 1}, "2025-12": {}, "2026-01": {}, "2026-02": {"recommend": 1}, "2026-03": {"recommend": 1}, "2026-04": {"recommend": 1}, "2026-05": {}, "2026-06": {}, "2026-07": {}, "2026-08": {}, "2026-09": {}, "2026-10": {}}, "versions": [], "version_unnamed": 0, "quotes": [{"id": 762967281, "item_id": 47685455, "url": "https://news.ycombinator.com/item?id=47685455", "by": "ggm", "date": "2026-04-07", "version": null, "stance": "recommend", "quote": "I use bastille, and it seems to \"just work\"", "excerpt": "I don't personally like proxies, intermediaries, but that said they've been entirely normalised by kubernetes/traefik/haproxy type setups. I do find managing the bridge pseudo-devices, and the various bindings, and DHCP/SLAAC a bit painful because I actually don't understand it well. I use bastille, and it seems to \"just work\" and I looked at Sylve and it had huge potential. When I ask for some ELI5 on bridge/net stu", "context": "", "use_case": "FreeBSD jail management", "switched_from": "", "story": "Cells for NetBSD: kernel-enforced, jail-like isolation"}, {"id": 756231152, "item_id": 47264447, "url": "https://news.ycombinator.com/item?id=47264447", "by": "lateralux", "date": "2026-03-05", "version": null, "stance": "recommend", "quote": "I\u2019ve found Bastille really simple and great for creating and managing jails", "excerpt": "I\u2019ve found Bastille really simple and great for creating and managing jails https://bastillebsd.org/", "context": "", "use_case": "FreeBSD jail management", "switched_from": "", "story": "Jails for NetBSD \u2013 Kernel Enforced Isolation and Native Resource Control"}, {"id": 753799200, "item_id": 47112450, "url": "https://news.ycombinator.com/item?id=47112450", "by": "craftkiller", "date": "2026-02-22", "version": null, "stance": "recommend", "quote": "Bastille offers a pretty much identical workflow to docker, but built on FreeBSD jails", "excerpt": "If you don't want to use the base system (which docker is NOT the base system on Linux) then Bastille offers a pretty much identical workflow to docker, but built on FreeBSD jails: https://github.com/BastilleBSD/bastille > I don\u2019t know why i keep hearing about jails being better Jails have a significantly better track record in terms of security. I can delegate a ZFS dataset to a jail to let the jail manage it. Do Li", "context": "", "use_case": "FreeBSD jail management", "switched_from": "", "story": "Back to FreeBSD: Part 1"}, {"id": 734611873, "item_id": 45913242, "url": "https://news.ycombinator.com/item?id=45913242", "by": "Gud", "date": "2025-11-13", "version": null, "stance": "neutral", "quote": "", "excerpt": "I would guess they run well. I use the Linuxulator for a few different tasks.", "context": "", "use_case": "", "switched_from": "", "story": "A brief look at FreeBSD"}, {"id": 734593152, "item_id": 45912072, "url": "https://news.ycombinator.com/item?id=45912072", "by": "solid_fuel", "date": "2025-11-12", "version": null, "stance": "warn", "quote": "They're still considered experimental so I wouldn't run it for production", "excerpt": "Makes sense, out of curiosity have you tried the linux jails that Bastille offers? [0] They're still considered experimental so I wouldn't run it for production but I wonder how well .Net would run in one. The whole container could be a zfs dataset, which would be interesting. [0] https://docs.bastillebsd.org/en/latest/chapters/gettingstarted.html#linux-jail", "context": "", "use_case": "FreeBSD jail management", "switched_from": "", "story": "A brief look at FreeBSD"}, {"id": 733690352, "item_id": 45855647, "url": "https://news.ycombinator.com/item?id=45855647", "by": "righthand", "date": "2025-11-08", "version": null, "stance": "recommend", "quote": "Bastille has \u201ctemplates\u201d: https://bastillebsd.org/templates/", "excerpt": "Bastille has \u201ctemplates\u201d: https://bastillebsd.org/templates/", "context": "", "use_case": "FreeBSD jail management", "switched_from": "", "story": "Immutable Software Deploys Using ZFS Jails on FreeBSD"}, {"id": 733689968, "item_id": 45855623, "url": "https://news.ycombinator.com/item?id=45855623", "by": "righthand", "date": "2025-11-08", "version": null, "stance": "recommend", "quote": "I highly reccomend installing Bastille FreeBSD instead", "excerpt": "If you want to do this kind of thing but don\u2019t like the looks of this indepth tutorial, I highly reccomend installing Bastille FreeBSD instead and let the bastille tooling do the heavy lifting of managing zpool cloning and what not. Their getting started tutorial should get you 90% of the way there and has Docker like tooling. [0] Also found this self host on a Raspberry Pi helpful.[1] [0] https://bastillebsd.org/get", "context": "", "use_case": "FreeBSD jail management", "switched_from": "", "story": "Immutable Software Deploys Using ZFS Jails on FreeBSD"}, {"id": 732726576, "item_id": 45795411, "url": "https://news.ycombinator.com/item?id=45795411", "by": "dddddaviddddd", "date": "2025-11-02", "version": null, "stance": "recommend", "quote": "I like this because I can destroy and recreate the jails easily", "excerpt": "I've started using Bastille recently, it allows using Dockerfile-like 'templates' to provision jails. I like this because I can destroy and recreate the jails easily, particularly to move to a new release (without having to do in-place upgrades synced to the host version, which is how I used to do it).", "context": "", "use_case": "FreeBSD jail provisioning", "switched_from": "", "story": "Using FreeBSD to make self-hosting fun again"}]}