4 ms·
Once you have a vm, the container provides next to no additional security benefits. It's just unnecessary overhead at that point.
by figmert 2mo ago
Once you have a vm, the container provides next to no additional security benefits. It's just unnecessary overhead at that point.
- codethief 2mo agoThat's not correct. Virtio devices have different security properties and many of them expose the host system to considerable risks. Using containerization on the host is one way to limit the latter. See e.g. https://github.com/libkrun/libkrun/#security-model https://github.com/libkrun/libkrun/#security-model for more details.
- figmert 2mo agoWell, I stand corrected! Thanks for the link