4 ms·

True, but Docker adds true separation. It enhances security and decreases random damage area.

• davexunit 11y ago
  Docker has major security issues. Guix and Nix allow for much more security via build reproducibility, extensive checksumming, and of course, containers. I don't know what "random damage area" means, but you can't shoot yourself in the foot with Guix or Nix. If you screw up, you just roll back and try again.
  • mateuszf 11y ago
    What if an application removes all your files in the filesystem via "rm -rf /", because it has remote execution bug?
  • deleted 11y ago
    [deleted]