Spyke

Replies

linux

Comment on

Is using OCI containers as a security barrier a bad idea?

There are way too many ways for things to potentially escape from a container and start interacting with the parent os. These can vary from simple misconfiguration (they're not secure for this out of the box, and there are aspects of this that are easy to get wrong) to unknown kernel vulnerabilities that can't reasonably be defended against.

As someone else said, use virtual machines if you're really concerned.