4 ms·
Docker provides much more isolation than a dynamic libraries. Static linking is not a new thing. It was there since a beginning. Dynamic linking is a new thing
by vbezhenar 4y ago
Docker provides much more isolation than a dynamic libraries.
Static linking is not a new thing. It was there since a beginning. Dynamic linking is a new thing compared to it.
- goodpoint 4y ago> Docker provides much more isolation The very opposite. You can do all the sandboxing you want without needing docker and you will avoid docker's big attack surface.
- naasking 4y agoNot without machine code analysis. That's a pretty big attack surface itself if you're relying on it for safety properties.