alt Hacker NewsBecause that means you are sharing kernel with the sandboxed agent. Virtualization presents an infinitely smaller attack surface.
Because that means you are sharing kernel with the sandboxed agent. Virtualization presents an infinitely smaller attack surface.
If there is any attack surface within a properly-configured container, that's a kernel bug, right?