In my opinion, VM's are less secure than containers.
VM's provide a large attack surface, while one CAN restrict containers sufficiently. See contained.af. Doesnt mean Docker does this though.
VM's provide a large attack surface, while one CAN restrict containers sufficiently. See contained.af. Doesnt mean Docker does this though.
Simply speaking, VMs only need to properly take care of a few privileged CPU opcodes.