Skip to main content

Containerisation is a solution to isolation, not to security.



Certainly, running application in containers isolate it in different kernel namespaces (eg pid, user etc). But is that sufficient from security point of view?

from Pocket https://ift.tt/32L8wLx
via IFTTT

Comments

Popular posts from this blog

25 Years Later – Why I’m Still a CCIE - Cisco Blogs

Cisco published an article on my 25 year journey as a CCIE, the highest level of technical certification that Cisco offers. That's the inimitable Carlos... 61 comments on LinkedIn from Pocket https://ift.tt/2XbxbVJ via IFTTT

Overview¶

The Open Network Install Environment (ONIE) is an open source initiative that defines an open "install environment" for modern networking hardware. ONIE enables an open networking hardware ecosystem where end users have a choice among different network operating systems. from Pocket https://ift.tt/3f5QJB0 via IFTTT

Solving the Multi-PFE Chassis Challenge in SONiC with Juniper PTX

At Juniper Networks, we’re big believers in disaggregating hardware from software and even disaggregating software itself. Needless to say, we’ve followed the evolution of Microsoft’s Software for Open Networking in the Cloud (SONiC) with great interest. from Pocket https://ift.tt/32YRfwI via IFTTT