2 ms·

Fair enough. So what’s your answer?

• eeZah7Ux 8y ago
  A lot less, mostly because: - the docker containers are often based on the same distributions - the distribution keeps received security updates that are often neglected by the docker ecosystem - the distribution is designed to give maximum control to system engineers: not to install (or remove) any package that is not required - applications are packaged using dynamic linking and without vendored dependencies as much as possible. Vulnerabilities in dependencies are patched once and for all system-wide - some distributions do peer review and have a very high entry bar to become a member