3 ms·
Because containers on Linux will never be able to provide this, they are fundamentally insecure from the kernel layer up, adding another OS stack on top (k8s) w
by bitfilped 10mo ago
Because containers on Linux will never be able to provide this, they are fundamentally insecure from the kernel layer up, adding another OS stack on top (k8s) will never address the underlying mess that Linux containers are fundamentally.
- naikrovek 10mo agoThank you. OS-level isolation needs to be a thing. And it needs to be on by default.