• 2 Posts
  • 1.14K Comments
Joined 3 years ago
cake
Cake day: June 12th, 2023

help-circle

    1. Containerization is not a security improvement, since it strongly depends on the sandboxing (and the trends are terrible for that)
    2. Containerization frustrates validation of the installed state of the system. This means you can’t answer “how do you know” when you need to.
    3. Containerization adds a layer of unnecessary tech. I’m not saying it’s a bad thing, just something you don’t need.

    I say this as a former OS security guy for Unix and Linux – like, as a job, working for a very well-known global vendor.