3 ms·
I thought it also turned on/off spectre/meltdown mitigations (impacts branch prediction) on vulnerable cpus.
by stock_toaster 5y ago
I thought it also turned on/off spectre/meltdown mitigations (impacts branch prediction) on vulnerable cpus.
- viraptor 5y agoSo TIL turning on seccomp by default turns on mitigations as well. This is not explicitly documented in Docker and it does have the possibility to opt out but doesn't. https://www.phoronix.com/scan.php?page=article&item=linux-420wip-stibp&num=1 https://www.phoronix.com/scan.php?page=article&item=linux-42...