Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Google Launches Managed Service for Running Docker Apps on Its Platform. Parent comment
My view is that the surface area for cgroups/kernel namespaces is just too large and isn't appropriate for hostile untrusted workloads right now.
More nuanced statement on this here: http://googlecloudplatform.blogspot.com/2014/08/containers-v...
There are no comments on this comment yet.
My view is that the surface area for cgroups/kernel namespaces is just too large and isn't appropriate for hostile untrusted workloads right now.
More nuanced statement on this here: http://googlecloudplatform.blogspot.com/2014/08/containers-v...