Re:Containers Are Not the Future
by chubot on Thursday March 19, 2020 @03:48PM
(#22630938)
Containers have uses, but yes if you expect them to be secure, you're in for a big surprise.
And last time I checked Kubernetes basically washes its hands of the problem, and maybe makes it worse by adding layers that obscure the security properties.
I worked on a Kube-like project from 2010-2015 and I was definitely horrified by the state of containers in the Linux kernel. Security is basically what made me give up on the project.
Re:Containers Are Not the Future
by techntoke on Thursday March 19, 2020 @05:52PM
(#22632143)
You can run containers in userspace, use app armor, etc and you get better security. Aside from maybe one or two major security exploits, what issues have you want into?
And last time I checked Kubernetes basically washes its hands of the problem, and maybe makes it worse by adding layers that obscure the security properties.
I worked on a Kube-like project from 2010-2015 and I was definitely horrified by the state of containers in the Linux kernel. Security is basically what made me give up on the project.