4 ms·

A docker container isn’t as bulletproof as a VM but it would certainly block this kind of attack. They’re super fast and easy to spin up.

• goodpoint 1y ago
  It would not block many other attacks.
  • oofbey 1y ago
    Can you give some examples? I think of my containers as decently good security boundaries, so I'd like to know what I'm missing.
    • kwar13 1y ago
      Containers share resources at the OS level, VMs don't. That's the crucial difference.
    • goodpoint 1y ago
      Containers share the whole kernel (and more) so there's a massive attack surface.