← Feed

Posts

• View post

  Is using OCI containers as a security barrier a bad idea? In a comment over at !selfhosted@lemmy.world someone wrote: Containers are not a security barrier. They cannot be, they never will be. I’m no expert but my mental model of containers was different in that I thought containerized processes live in somehow separate environments at least filesystem- and network-wise. I run self-hosted services in containers on my server and now and then binaries I don’t fully trust (things like susp...