4 ms·
Containers provide resource limits but not necessarily safety. The ABI surface is too large. You kind of need the code inside them to be secure.
by Tobu 10y ago
Containers provide resource limits but not necessarily safety. The ABI surface is too large. You kind of need the code inside them to be secure.
- zzzcpan 10y agoHmm, what large surface? You only need like a couple of syscalls for an image decoder, it doesn't need anything else from the OS and is supposed to be short-lived.
- pcwalton 10y ago> You only need like a couple of syscalls for an image decoder, it doesn't need anything else from the OS and is supposed to be short-lived. Not if you're going to take advantage of hardware acceleration.