Re:FreeBSD Jails for Fun and Profit (2020)
by tptacek on Wednesday December 22, 2021 @04:00PM
(#29655116)
They're approximately as safe as modern Docker is. Upside to Docker: more security knobs (eBPF, kernel MAC, &c); upside to jails: probably easier to get right out of the box, fewer footguns. Both jails and containers (and Solaris Zones) share a fundamental security weakness, which is a kernel shared between tenants.
[ Parent
| on HN ]
There are no comments on this comment yet.