8 ms·

> Docker only uses namespaces and cgroups. How is that not isolation?

• kaba0 4y ago
  The docker daemon has basically root over your system, so any escape can end very badly.