News for hackers. Stuff that matters.
Re:Iocage – A FreeBSD jail manager by alexktz on Monday November 14, 2016 @07:54AM (#12949468)
> Docker on the other hand is fairly fragile and offers neither secure isolation between containers nor between containers and the host.

Please elaborate... Otherwise, great summary.

Re:Iocage – A FreeBSD jail manager by crest on Friday November 18, 2016 @09:15AM (#12986869)
Docker moves fast and breaks things without stabilising them first this post explains the problem fairly well: https://thehftguy.wordpress.com/2016/11/01/docker-in-product....

There have been lots of bugs (some could be considered design failures) allowing processes to escape from a docker container. Fixing those problems hasn't received the attention from the docker community I would expect from a serious OS level virtualisation community. In some cases it boiled down to "yeah just don't do that" or "no problem just put docker inside a VM".