3 ms·
> uses unprivileged containers by default and can be hardened with additional software for syscall filtering You also described docker. I agree that docker's
by ithkuil 5y ago
> uses unprivileged containers by default and can be hardened with additional software for syscall filtering
You also described docker.
I agree that docker's main focus isn't to be a security oriented sandbox, but perhaps you need to find a different wording of what exactly makes LXD (or others) so different.
- zibzab 5y ago> You also described docker. Can docker do secure multiuser? https://m.youtube.com/watch?v=6O0q3rSWr8A https://m.youtube.com/watch?v=6O0q3rSWr8A