3 ms·
That's funny because getting these things right (without security issues) is quite difficult.
by cpuguy83 8y ago
That's funny because getting these things right (without security issues) is quite difficult.
- 013a 8y agoIts very likely that most of the challenging security stuff will continue to move down into the kernel itself. Its important to remember that the entire concept of a container wasn't really a single unified concept in the Kernel until very recently as they've gained popularity; instead, they were a amalgamation of a few different capabilities in the kernel.
- fatherlinnux 8y agoPerhaps, you caught news of something I haven't seen, but AFAIK, "container" is still defined in user space. Talking to Eric Biederman, that's what the kennel team wants - people to experiment in user space, remixing kernel tech together...
- cpuguy83 8y agoThere's a new-ish (from Feb) LWN article about container's as an object in the kernel: https://lwn.net/Articles/780364/ https://lwn.net/Articles/780364/ Reception still doesn't seem great.