> Docker does not have much overhead over chroot with a large drop in security/isolation Docker adds plenty of attack surface that could easily be avoided by u

> Docker does not have much overhead over chroot with a large drop in security/isolation Docker adds plenty of attack surface that could easily be avoided by using any sandbox or a systemd unit file.