Comment by bitfilped
3 months ago
Because containers on Linux will never be able to provide this, they are fundamentally insecure from the kernel layer up, adding another OS stack on top (k8s) will never address the underlying mess that Linux containers are fundamentally.
Thank you.
OS-level isolation needs to be a thing. And it needs to be on by default.