Slacker News Slacker News logo featuring a lazy sloth with a folded newspaper hat
  • top
  • new
  • show
  • ask
  • jobs
Library

Comment by oofbey

1 year ago

Can you give some examples? I think of my containers as decently good security boundaries, so I'd like to know what I'm missing.

2 comments

oofbey

Reply

kwar13  10 months ago

Containers share resources at the OS level, VMs don't. That's the crucial difference.

goodpoint  10 months ago

Containers share the whole kernel (and more) so there's a massive attack surface.

Slacker News

Product

  • API Reference
  • Hacker News RSS
  • Source on GitHub

Community

  • Support Ukraine
  • Equal Justice Initiative
  • GiveWell Charities