Hacker News Reader

I think that security has always been a goal of FreeBSD jails and I believe they are a bit more hardened than docker

Docker only uses namespaces and cgoups.

Docker does not provide and security or isolation.

To have security and isolation with Docker you must use something external like SELinux or AppArmor.

Hope that helps.

Regards.

Docker also uses seccomp.

> Docker only uses namespaces and cgroups.

How is that not isolation?

The docker daemon has basically root over your system, so any escape can end very badly.