News for hackers. Stuff that matters.

A comment on WebAssembly: Docker Without Containers. Parent comment

Re:WebAssembly: Docker Without Containers by erk__ on Wednesday December 21, 2022 @12:21PM (#34083497)
I think that security has always been a goal of FreeBSD jails and I believe they are a bit more hardened than docker
[ Parent | on HN ]
Re:WebAssembly: Docker Without Containers by vermaden on Wednesday December 21, 2022 @03:52PM (#34086229)
Docker only uses namespaces and cgoups.

Docker does not provide and security or isolation.

To have security and isolation with Docker you must use something external like SELinux or AppArmor.

Hope that helps.

Regards.

[ Parent | on HN ]
Re:WebAssembly: Docker Without Containers by xvector on Wednesday December 21, 2022 @04:12PM (#34086460)
Docker also uses seccomp.
[ Parent | on HN ]
Re:WebAssembly: Docker Without Containers by rapidlua on Wednesday December 21, 2022 @05:28PM (#34087256)
> Docker only uses namespaces and cgroups.

How is that not isolation?

[ Parent | on HN ]
Re:WebAssembly: Docker Without Containers by kaba0 on Thursday December 22, 2022 @04:16AM (#34091358)
The docker daemon has basically root over your system, so any escape can end very badly.
[ Parent | on HN ]