3 ms·
> - containers are each isolated in a VM (aka virtualized) Why are you assuming containers are virtualized? Is there some container runtime that does that as a
by gcoakes 3y ago
> - containers are each isolated in a VM (aka virtualized)
Why are you assuming containers are virtualized? Is there some container runtime that does that as an added security measure? I thought they all use namespaces on Linux.
- danappelxx 3y agoIt’s becoming standard as a security measure. See: Kata containers, Firecracker VM
- otterley 3y agoNot so; neither Kata containers nor Firecracker are in widespread public use today. (Source: I work for AWS and consult regularly with container services customers, who both use AWS and run on premise.)
- danappelxx 3y agoAh, good to know!