And for other people reading, this is from the docker project founder: https://news.ycombinator.com/item?id=7910117 https://news.ycombinator.com/item?id=791011

And for other people reading, this is from the docker project founder: https://news.ycombinator.com/item?id=7910117 https://news.ycombinator.com/item?id=7910117 """Docker will soon support user namespaces, which is a great additional security layer but also not a silver bullet! When we feel comfortable saying that Docker out-of-the-box can safely contain untrusted uid0 programs, we will say so clearly.""" You simply don't get any more authoritative than the guy who wrote docker.