4 ms·
You still want the additional security, if your daemon gets compromised. You still want to restrict resources (number of cores, memory, etc). Nevertheless, I
by qznc 10y ago
You still want the additional security, if your daemon gets compromised.
You still want to restrict resources (number of cores, memory, etc).
Nevertheless, I agree that containers are often a cut through Gordian Knot. Just put everything in its own box instead of resolving dependencies.
- milesrout 10y agoContainers don't provide additional security, nor do they provide additional ways to restrict resources. If you want to restrict resources or sandbox programmes, you can do so without containers.