3 ms·
Going by discussions like https://bugs.archlinux.org/task/36969 https://bugs.archlinux.org/task/36969 (and the RHEL ticket it links in turn), it seems USER_NS i
by creshal 11y ago
Going by discussions like https://bugs.archlinux.org/task/36969 https://bugs.archlinux.org/task/36969 (and the RHEL ticket it links in turn), it seems USER_NS in Linux isn't quite ready for production use anyway.
But yeah, I guess we should totally fund container startups, because… something.
(They seem good enough for local development, at least.)
- eropple 11y agoThere are definitely vulnerabilities being discovered in user namespaces, but they're a significant layer of defense as-is that will only improve. To be honest, I don't think containers are even particularly good for local development. I'd rather run something that acts like my production environment, which means a virtualized system that's version- and patch-equivalent to my prod environment. I use Vagrant and scaled-down virtual machines for that.