3 ms·

Hopefully you are ready for https://conference.hitb.org/hitbsecconf2016ams/sessions/escape-from-the-docker-kvm-qemu-machine/ https://conference.hitb.org/hitbsec

• alch- 10y ago
  This. Awesome service, but pleasefortheloveofgod don't let people run arbitrary code inside Docker, unless you don't mind them getting out into the parent OS and messing around. You want VMs for that. (Yeah, that's much more resource intensive. Safely running arbitrary code is hard.)
  • wyldfire 10y ago
    seccomp provides a really good jail, probably all that's needed here.