4 ms·
"citation needed", solomon hykes (hn username: shykes) has been OVERLY forthright about container security. I could easily find a dozen posts showing so, but do
by SEJeff 12y ago
"citation needed", solomon hykes (hn username: shykes) has been OVERLY forthright about container security. I could easily find a dozen posts showing so, but don't think you can find 2 to the contrary.
- deleted 12y ago[deleted]
- ZakMil 12y agoWell, here's one for starters... and it's from a Dotcloud developer even. As you can see, the claim of "Docker can do everything" is getting stronger and stronger. We have people thinking they can ditch virtualization in a multi-tennant hosting situation and be "safe" with Docker... which is absurdly false. You can see he makes the claim Docker provides security through cgroups and namespaces -- then a few comments later admits namespaces is not implemented yet. https://news.ycombinator.com/item?id=8213316 https://news.ycombinator.com/item?id=8213316
- SEJeff 12y agoAnd for other people reading, this is from the docker project founder: https://news.ycombinator.com/item?id=7910117 https://news.ycombinator.com/item?id=7910117 """Docker will soon support user namespaces, which is a great additional security layer but also not a silver bullet! When we feel comfortable saying that Docker out-of-the-box can safely contain untrusted uid0 programs, we will say so clearly.""" You simply don't get any more authoritative than the guy who wrote docker.