5 ms·

I think that security has always been a goal of FreeBSD jails and I believe they are a bit more hardened than docker

• vermaden 4y ago
  Docker only uses namespaces and cgoups. Docker does not provide and security or isolation. To have security and isolation with Docker you must use something external like SELinux or AppArmor. Hope that helps. Regards.
  • xvector 4y ago
    Docker also uses seccomp.
  • rapidlua 4y ago
    > Docker only uses namespaces and cgroups. How is that not isolation?
    • kaba0 4y ago
      The docker daemon has basically root over your system, so any escape can end very badly.