Comment Re:Sorry what? (Score 1) 169
What If, not exactly the classic xkcd comics, but worthy a book even if he don't expand even more the articles over what was posted in that site.
What If, not exactly the classic xkcd comics, but worthy a book even if he don't expand even more the articles over what was posted in that site.
The point of Docker and containers in general is that they are running at basically native performance. There is no vm, no virtualized OS, you run under the main OS kernel, but it don't let you see the main OS filesystem, network, processes and so on, and don't let you do operations risky for the stability of the main system. There is some overhead in the filesystem access (in the case of docker, you may be running on AUFS, device mapper, or others that will have different kind of impact in several operations), but still is a far cry from VMs using a filesystem on a file of the main system with its own filesystem driver.
When the only tool you have is a hammer, everything looks like a nail. Now police's only tool are military-grade weapons, intended to kill.
And sometimes the situation changes how people is, like in this Standford prison experiment
Add to that how police cover up miscarriages and that you can't film the police, is not just who watches the watchers, but who watches the watchers that have military-grade weapons in the streets and are abusing of them.
Work expands to fill the time available. -- Cyril Northcote Parkinson, "The Economist", 1955