Re: docker updates
eric gisse <[email protected]> Fri, 27 Feb 2015 20:58:36 -0600
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <CAHZ_Ajtk4wjFPW+ZfvHPRBd+H4N6sQkjwj3ZeD5FUTzGaCJZPw@mail.gmail.com> |
Let's turn this around. What is the business case for containerization when security is so loose and ill-defined right now? On Thu, Feb 26, 2015 at 7:20 PM, Alex Efros <[email protected]> wrote: > Hi! > > On Thu, Feb 26, 2015 at 11:35:34AM +0100, F. Alonso wrote: >> I agree with containers do not improve security. > > I agree too, but my original question was about how to avoid LOWERING > security if we move ours apps/services into containers. > > I didn't expect containers to really increase security (but some extra > isolation and resource management doesn't harm, and extra cost of running > docker daemon looks like acceptable trade-off for LXC ease to use). > > -- > WBR, Alex. >