Containers provide resource isolation using a shared kernel but are not intended to be used in hostile multitenancy scenarios. A key feature of OS virtualisati

Containers provide resource isolation using a shared kernel but are not intended to be used in hostile multitenancy scenarios. A key feature of OS virtualisation is the strong segmentation boundary between 1. Guests 2. Guests and the hypervisor. For this reason, VMs are seen to provide a stronger security boundary than containers and are used in preference where that aspect is critical owing to environment, multi-tenancy, business context. See also https://searchcloudsecurity.techtarget.com/tip/VMs-vs-containers-Which-is-better-for-security https://searchcloudsecurity.techtarget.com/tip/VMs-vs-contai...