Docker security

There are four major areas to consider when reviewing Docker security: The intrinsic security of the kernel and its support for namespaces and cgroupsThe attack surface of the Docker daemon itselfLoopholes in the container configuration profile, either by default, or when customized by users.The "hardening" security features of the kernel and how they interact with containers.Kernel namespacesDock

[chanpe246]

Linux namespace, croup

[pekeq]

「LXC is nothing else than "OpenVZ redesigned to be able to be merged into the mainline kernel"」

[teppeis]

DockerのLXC周りの解説と他の仮想マシンやコンテナとの比較