3 ms·

You have either deliberately misrepresented "Docker" in your post, or don't know enough about the vulnerability (and the affected software, runc) to make the cl

You have either deliberately misrepresented "Docker" in your post, or don't know enough about the vulnerability (and the affected software, runc) to make the claims you are making. The vulnerability was in runc, and Docker et al have had the capability to utilize user namespaces for a number of years.

dragonsh 7y ago
No I did not mis-represent docker, used it since version 0.96 and after 1.0. Also commented, when under the new investment it tried to re-invent the wheels by moving away from lxc base to re-write its own libcontainer and lost on the development of unprivileged containers which landed in lxc 1.0. Since than it’s always been a security nightmare. Docker although inferior and less secure than LXC/LXD became popular due to marketing driven by VC money, not on technical merits. Check the old thread discussing the security issue with docker not supporting unprivileged container. [1] [1] https://news.ycombinator.com/item?id=20487625 https://news.ycombinator.com/item?id=20487625