> All Linux containers leak the host kernel no?
Curious in what way?
Curious in what way?
Running either of
docker run --rm --entrypoint /bin/uname alpine:latest -a
or uname -a
gives you the same kernel version. The only difference will be in the hostname.[0]: https://embeddedbits.org/introduction-linux-containers/
ps -ef
on the host and you'll see the processes in the containers too. That doesn't happen if those processes run in a VM.The container on the other hand cannot see the host's processes or other things. At least not without an exploit.