4 ms·
You mean cgroups, or zones don’t you? Docker (was, last time I heard) a security disaster, not generating robust layer hashes, lacking user isolation, and plent
by eecc 6y ago
You mean cgroups, or zones don’t you? Docker (was, last time I heard) a security disaster, not generating robust layer hashes, lacking user isolation, and plenty just running as root...
- giantrobot 6y agoThere's more to containers on Linux than just Docker.
- ampdepolymerase 6y agoTo be fair you need to go to the hypervisor level (like Firecracker) to get any decent level of sandboxing.