http://container.camp/ @containercamp

In the past few years there have been a fair few CVEs in container runtimes and container orchestration tools, often relating to container breakouts or otherwise attacking the host. In this talk, we will go through why it appears to be difficult to create secure container runtimes and some steps that are being taken by popular runtimes to try to avoid these sorts of issues in the future (on both sides of the kernel-userspace boundary).

Aleksa Sarai is a core …