5 ms·
> "OS running like a VM" is a wrong summary. I think it is a fair summary, because the implications of running in Docker are often the same as running a real V
by seppel 7y ago
> "OS running like a VM" is a wrong summary.
I think it is a fair summary, because the implications of running in Docker are often the same as running a real VM.
To exemplify, a common mistake is to run a server as the entrypoint of the docker container. The server will then run as PID 1, with all the implications and responsibilities an init process has. This causes a lot of subtile and annoying problems.
- mav3rick 7y agoThe container is running on the same kernel as the host. That is not the case with a VM.
- seppel 7y agoWell, not if you use Docker on Windows or Mac. But these are technicalities that don't matter that much. Unless you are writing kernel drivers or you need to tweak certain kernel parameters, running in a Docker container is very much as running in a VM. With the same responsibilities, e.g., setting up an init process.
- mav3rick 7y agoA CVE on your host kernel affects your container. Not your VM. So yes it does "matter much".