Hacker News new | ask | show | jobs
by oofbey 239 days ago
Can you give some examples? I think of my containers as decently good security boundaries, so I'd like to know what I'm missing.
2 comments

Containers share resources at the OS level, VMs don't. That's the crucial difference.
Containers share the whole kernel (and more) so there's a massive attack surface.