Hacker News new | ask | show | jobs
by goodpoint 1509 days ago
No. What you are thinking about is sandboxing, which is not docker's main objective and can be done with many better tools like firejail.

docker adds its own daemon that creates additional attack surface that you would not have otherwise.