Re: [gentoo-hardened] docker updates

2015-02-27 Thread Sven Vermeulen
On Sat, Feb 28, 2015 at 3:58 AM, eric gisse wrote: > Let's turn this around. > > What is the business case for containerization when security is so > loose and ill-defined right now? The promise (and depending on your context and regulations, this might be true already as well) is that you can of

Re: [gentoo-hardened] docker updates

2015-02-27 Thread eric gisse
Let's turn this around. What is the business case for containerization when security is so loose and ill-defined right now? On Thu, Feb 26, 2015 at 7:20 PM, Alex Efros wrote: > Hi! > > On Thu, Feb 26, 2015 at 11:35:34AM +0100, F. Alonso wrote: >> I agree with containers do not improve security.

Re: [gentoo-hardened] docker updates

2015-02-26 Thread Alex Efros
Hi! On Thu, Feb 26, 2015 at 11:35:34AM +0100, F. Alonso wrote: > I agree with containers do not improve security. I agree too, but my original question was about how to avoid LOWERING security if we move ours apps/services into containers. I didn't expect containers to really increase security (

Re: [gentoo-hardened] docker updates

2015-02-26 Thread F. Alonso
I agree with containers do not improve security. It is a business solution quite useful for Cloud services, developers, and maybe in the future to isolate desktop apps like QubeOS with Xen, but is fairly new so it lacks certain security requirements. Imho this basically add more complexity to explo

Re: [gentoo-hardened] docker updates

2015-02-25 Thread Sven Vermeulen
Security of docker is still a hot topic. Some people believe that the fact that the application runs in a container adds a layer of security that allows for a somewhat slower adoption of security patches. I don't share that vision at all. The applications are running for a reason - they might be pr