9 ms·
While your point about Docker’s primary purpose is valid, containerization is commonly used for security isolation as well. With proper configuration, it can be
by anais9 2y ago
While your point about Docker’s primary purpose is valid, containerization is commonly used for security isolation as well. With proper configuration, it can be very useful towards this end.
Can you suggest any preferred alternative methods of isolation that offer similar efficacy and ease of use for quickly running complete software systems made by an unknown/untrusted actor?
- beeboobaa3 2y ago> With proper configuration, it can be very useful towards this end. It can. I think it's fair to assume that the standard developer setup to let them be productive is not this proper configuration. > Can you suggest any preferred alternative methods of isolation that offer similar efficacy and ease of use for quickly running complete software systems made by an unknown/untrusted actor? No. It's a hard problem! If it was easily solved we wouldn't be seeing all this development surrounding e.g. WebAssembly
- goodpoint 2y agocontainerization is commonly MISused for security isolation
- DEADMINCE 2y agoBubblewrap, Firejail, SELinux, etc