Slacker News Slacker News logo featuring a lazy sloth with a folded newspaper hat
  • top
  • new
  • show
  • ask
  • jobs
Library
← Back to context

Comment by oofbey

5 months ago

Can you give some examples? I think of my containers as decently good security boundaries, so I'd like to know what I'm missing.

2 comments

oofbey

Reply

kwar13  5 months ago

Containers share resources at the OS level, VMs don't. That's the crucial difference.

goodpoint  5 months ago

Containers share the whole kernel (and more) so there's a massive attack surface.

Slacker News

Product

  • API Reference
  • Hacker News RSS
  • Source on GitHub

Community

  • Support Ukraine
  • Equal Justice Initiative
  • GiveWell Charities