Collaborate Disseminate
Edit: though my wording may not be exact, I understand that two containers don’t have access to the same memory at the same time. My question is can one container see data that another has deallocated?
LXC allows us to over-provision RAM.
… Continue reading Is RAM wiped before use in another LXC container?
We have some systems where users are using Docker in userspace to run development environments. These containers sometimes leave files and directories behind that cannot be deleted directly by the users because they were created by other u… Continue reading Security implications of providing lxc-utils to regular users
I consider running Android applications in Anbox instead of running them in a virtual machine (Android-x86 in GNOME Boxes using QEMU with KVM). Does it increase the chances that malicious code in an Android app will get unauthorized access… Continue reading What disadvantages running untrusted applications in anbox has over running them in a virtual machine?
You can find many claims online regarding BSD jails being “better” in some way than Linux namespaces for containment, but they typically lack technical details.
From what I understand, the attack surface is pretty much equivalent (shared … Continue reading Do BSD jails protect against some vulnerability class that LXC doesn’t?
I have the following scenario.
I’m hosting some services on a VPS.
Each service is running inside an LXC container.
Some services like email contain information that I would like to be stored encrypted on disk. Not because I … Continue reading Encryption on an LXC container?
I was thinking on using LXD instead of Docker, but I can’t find anything about how secure it is compared to a regular or a CIS hardened Docker. Any information about this?
What can I use to avoid running a full-fledged VM that gives me comparable security?
Possibly, something like https://coreos.com/rkt/ but I don’t know what their security properties are.
Continue reading What lightweight sandboxing options do I have on linux?
My friend told me today that I should never use LXC without changing its default configuration. Instead, I should prefer to use LXD, as it is “more secure” by default.
Is that true? What are the differences between LXC and L… Continue reading LXC vs. LXD: Which is “more secure”?