News for hackers. Stuff that matters.

A comment on My VM is lighter (and safer) than your container (2017). Parent comment

Re:My VM is lighter (and safer) than your container (2017) by antod on Thursday September 08, 2022 @05:41PM (#32772454)
LXC/LXD use the same kernel isolation/security features Docker does - namespaces, cgroups, capabilities etc.

After all, it is the kernel functionality lets you run something as a container. Docker and LXC/LXD are different management / FS packaging layers on top of that.

[ Parent | on HN ]
Re:My VM is lighter (and safer) than your container (2017) by staticassertion on Thursday September 08, 2022 @05:42PM (#32772471)
I assume it's not using seccomp, which Docker uses, although seccomp is not Docker specific and you can go grab their policy.
[ Parent | on HN ]