3 ms·
You should be assuming Docker is insecure until proven otherwise. Fully isolating a root user with a shared kernel is very difficult.
by ryan-c 12y ago
You should be assuming Docker is insecure until proven otherwise. Fully isolating a root user with a shared kernel is very difficult.
- mappu 12y agoOpenVZ is very widely deployed and manages to do this safely.
- SEJeff 12y agoReality disagrees with you good sir: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=openvz https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=openvz
- icebraining 12y agoThe first is not even an OpenVZ bug, and which of the others shows an exploit that breaks out of the VM?
- jchavannes 12y agoHow do you prove something is secure?