Hacker News Reader

How do you keep containers isolated?

Do you just run multiple docker containers from different apps on the same host?

Do you provide any sort of network isolation between apps?

Currently, we are running multiple containers from different apps on the same host. These containers are running with unprivileged users and reduced capabilities but in the same network. It will probably change in the future for a higher level of isolation.

Reply on news.ycombinator.com