3 ms·
The presentation makes a good point that containers aren't universally "insecure". For certain use cases they are absolutely fine because the trust boundary be
by stefanha 13y ago
The presentation makes a good point that containers aren't universally "insecure".
For certain use cases they are absolutely fine because the trust boundary between containers or the kernel isn't critical:
* Deployment (immutable servers)
* Development environment (develop against same configuration as production)
* Test environment (try different distros)
But running multiple containers from untrusted parties on one host is risky. Let's face it, kernel exploits do come out periodically and when that happens, container boundaries can be breached.
At the end of the day, security isn't absolute. You need to consider how valuable your data is and make your own decision.