top | item 34087256

(no title)

rapidlua | 3 years ago

> Docker only uses namespaces and cgroups.

How is that not isolation?

discuss

order

kaba0|3 years ago

The docker daemon has basically root over your system, so any escape can end very badly.