3 ms·

Docker only uses namespaces and cgoups. Docker does not provide and security or isolation. To have security and isolation with Docker you must use something e

Docker only uses namespaces and cgoups. Docker does not provide and security or isolation. To have security and isolation with Docker you must use something external like SELinux or AppArmor. Hope that helps. Regards.

xvector 4y ago
Docker also uses seccomp.
rapidlua 4y ago
> Docker only uses namespaces and cgroups. How is that not isolation?
- kaba0 4y ago
  The docker daemon has basically root over your system, so any escape can end very badly.