|
|
|
|
|
|
by tyingq
3486 days ago
|
|
|
LXD supports using different id maps per container, which mitigates some of that. I get that containers will always have a larger attack surface than Xen/KVM. Just thought it was worth mentioning that some container approaches are thinking about security more than others. |
|
|