1506
you are viewing a single comment's thread
view the rest of the comments
[-] residentmarchant@lemmy.world 12 points 8 months ago

The containers still run an OS, have proprietary application code on them, and have memory that probably contains other user's data in it. Not saying it's likely, but containers don't really fix much in the way of gaining privileged access to steal information.

[-] towerful@programming.dev 19 points 8 months ago

That's why it's containers... in containers

It's like wearing 2 helmets. If 1 helmet is good, imagine the protection of 2 helmets!

[-] PochoHipster@lemmy.ml 9 points 8 months ago

So is running it on actual hardware basically rawdoggin?

[-] lemann@lemmy.one 6 points 8 months ago

Wow what an analogy lol

[-] bobs_monkey@lemm.ee 6 points 8 months ago

What if those helmets are watermelon helmets

[-] Dyskolos@lemmy.zip 2 points 8 months ago

Then two would still be better than one ๐Ÿ˜‰

[-] dan@upvote.au 5 points 8 months ago

The OS in a container is usually pretty barebones though. Great containers usually use distroless base images. https://github.com/GoogleContainerTools/distroless

this post was submitted on 20 Oct 2023
1506 points (98.9% liked)

Programmer Humor

31215 readers
513 users here now

Post funny things about programming here! (Or just rant about your favourite programming language.)

Rules:

founded 4 years ago
MODERATORS