2 ms·
Would a VM be better for this? Is a VM less likely to be broken out of than Docker in this case? I'm guessing bare metal is the most secure thing to run a honey
by blakesterz 10y ago
Would a VM be better for this? Is a VM less likely to be broken out of than Docker in this case? I'm guessing bare metal is the most secure thing to run a honeypot in? My limited knowledge says... probably?
- jlgaddis 10y agoI have run various honeypots for years. I wouldn't feel comfortable with a "honeypot in a container". I'm not even that comfortable with a honeypot in a virtual machine, though I have done it for short periods of time. My personal preference is always for bare-metal. There's always an old PC or server sitting around that can be put into service as a honeypot and if something happens to it -- e.g., hardware failure with no replacements -- well, it's not a big deal.