Hacker News new | past | comments | ask | show | jobs | submit login

You keep saying I'm wrong, because in future docker/containers might work in a different way to how they work today, and will be used in a way entirely different to how people use them today (and utterly contrary to how docker has been marketed to date).

AFAICT through the wall of text, the only problem you have with what I said is that Docker loses its value when combined with a VM. That's fair enough, but that was 1% of my comment.

If you're replying, please don't quote yet another wall of text, it's almost impossible to read.




I think the problem the parent has with you're statement is you are saying "Docker is a crap security alternative"... but docker isn't marketed as a security solution, it's a "logical" process isolation.

It solves the "I want to run two apache's how do I stop them conflicting" problem. Not the "I don't trust what is being run here" problem, it has never been marketed as that, and you are presenting it as if it was.

Docker is a great way to build up a machine, and logically define a machines capabilities.

Your gripe about security is just completely irrelevant, it'd be like complaining that iPhoto doesn't increase OS X Security.

Edit: So the answer to the original "Is docker good for security?" I would say "maybe, but that's not its intention or focus".




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: