A critique of container security messaging, arguing that existing defaults like Seccomp and AppArmor provide robust, multi-layered sandboxing.
Explores the technical challenges and differences between traditional containers and true sandbox environments, focusing on user namespaces and privilege levels.
A technical guide on using Docker's user namespace support to run desktop applications like Chrome, Irssi, and Docker-in-Docker in containers for improved security.
A technical guide on creating and debugging custom Docker Seccomp security profiles for containers, using a Chrome container as an example.
