3 ms·
1) Is not needed if your app has no dependencies (otherwise it would not work in an empty "container") 2) Sandboxing can be done using a systemd service config
by megous 5y ago
1) Is not needed if your app has no dependencies (otherwise it would not work in an empty "container")
2) Sandboxing can be done using a systemd service configuration to a large extent.
- raesene9 5y ago1) I was more thinking of the delivery mechanism via centralized registries (i.e. Docker pull works for anything) 2) Sure in theory, you can totally replicate docker's sandboxing with Linux security principles, however containerized deployment gives you an easy to use sensible starting point :)