3 ms·
In my opinion, VM's are less secure than containers. VM's provide a large attack surface, while one CAN restrict containers sufficiently. See contained.af. Doe
by dobin 7y ago
In my opinion, VM's are less secure than containers.
VM's provide a large attack surface, while one CAN restrict containers sufficiently. See contained.af. Doesnt mean Docker does this though.
- fwsgonzo 7y agoI'm sorry but that is just false. VMs provide strong isolation which can even be two-way with secure enclaves.
- Tepix 7y agoI think you got it mixed up. The attack surface of a linux kernel is larger than the attack surface of a VM. Simply speaking, VMs only need to properly take care of a few privileged CPU opcodes.