News for hackers. Stuff that matters.

A comment on Open-sourcing gVisor, a sandboxed container runtime. Parent comment

Re:Open-sourcing gVisor, a sandboxed container runtime by flx42_ on Wednesday May 02, 2018 @01:19PM (#16979102)
nvidia-docker[1] maintainer here.

Curious to know, are you using docker today? If yes, is there anything missing to satisfy your security requirements?

[1] https://github.com/NVIDIA/nvidia-docker

[ Parent | on HN ]
Re:Open-sourcing gVisor, a sandboxed container runtime by bradneuberg on Wednesday May 02, 2018 @02:00PM (#16979575)
We aren't using Docker today; we have jailing infrastructure using linux cgroups, namespaces, seclist, etc.
[ Parent | on HN ]