undefined | Better HN

0 pointsblueflow3y ago0 comments

Containers do isolation in userspace, its a pure software thing. Its not doing any kind of hardware isolation nor is it able to.

0 comments

1 comments · 1 top-level

Don’t they use cgroups? It’s software but the kernel helps.

j / k navigate · click thread line to collapse