News for hackers. Stuff that matters.

A comment on WebAssembly: Docker Without Containers. Parent comment

Re:WebAssembly: Docker Without Containers by rapidlua on Wednesday December 21, 2022 @05:28PM (#34087256)
> Docker only uses namespaces and cgroups.

How is that not isolation?

[ Parent | on HN ]
Re:WebAssembly: Docker Without Containers by kaba0 on Thursday December 22, 2022 @04:16AM (#34091358)
The docker daemon has basically root over your system, so any escape can end very badly.
[ Parent | on HN ]