Re:A Tutorial Introduction to Kubernetes
by thinkmassive on Thursday July 05, 2018 @11:31AM
(#17464042)
If the same compromised app is running natively then the entire system is now compromised. Capabilities and namespaces can be used with or without containers.
[ Parent
| on HN ]
Re:A Tutorial Introduction to Kubernetes
by auslander on Thursday July 05, 2018 @11:42AM
(#17464131)
1. You may have different apps, owned by different owners, running as containers on same underlying host machine.
2. Not running docker means you can lock your httpd by chroot, FreeBSD jail or OpenBSD pledge.