undefined | Better HN

0 pointsoofbey5mo ago0 comments

Can you give some examples? I think of my containers as decently good security boundaries, so I'd like to know what I'm missing.

0 comments

kwar135mo ago

Containers share resources at the OS level, VMs don't. That's the crucial difference.

Containers share the whole kernel (and more) so there's a massive attack surface.

j / k navigate · click thread line to collapse

0 pointsoofbey5mo ago0 comments

Can you give some examples? I think of my containers as decently good security boundaries, so I'd like to know what I'm missing.

kwar135mo ago

Containers share resources at the OS level, VMs don't. That's the crucial difference.

Containers share the whole kernel (and more) so there's a massive attack surface.

j / k navigate · click thread line to collapse