5 ms·

Why do I need this if I already have containers and k8s for running agents?

• gbxk 1y ago
  It is well known that containers do not provide you safe isolation. It is not their purpose. They share kernel and page cache with the host. Any kernel exploit gives to someone in a container potential root control of the host (see DirtyPipe, DirtyCow). That's why you need VM-level isolation.
  • deleted 1y ago
    [deleted]
  • innanet-worker 1y ago
    today i'm one of the lucky 10k https://xkcd.com/1053/ https://xkcd.com/1053/
    • gbxk 1y ago
      Lucky you! And lucky me for sharing the info :)