3 ms·
I'm just now learning about the container technologies that are alternatives to Docker. More precisely, LXC, in case you had it in mind in your comment. Do you
by j1elo 6y ago
I'm just now learning about the container technologies that are alternatives to Docker. More precisely, LXC, in case you had it in mind in your comment.
Do you know of a set of settings or tips to follow for making containers as safe as a VM?
- fpoling 6y agoI use systemd-nspawn containers with max security options, like user namespaces, syscall filters, no-new-priveleges. Even with the user namespaces I do not run as a root in the user namespaces unless I need to install extra software inside the container.