Re: docker updates

Alex Efros <[email protected]> Fri, 27 Feb 2015 03:20:58 +0200
Newsgroups gmane.linux.gentoo.hardened
Organization http://powerman.name/
Message-ID <[email protected]>
Hi!

On Thu, Feb 26, 2015 at 11:35:34AM +0100, F. Alonso wrote:
> I agree with containers do not improve security.

I agree too, but my original question was about how to avoid LOWERING
security if we move ours apps/services into containers.

I didn't expect containers to really increase security (but some extra
isolation and resource management doesn't harm, and extra cost of running
docker daemon looks like acceptable trade-off for LXC ease to use).

-- 
			WBR, Alex.