Hacker News Reader

A VM is more robust as a security boundary than a container is. Still not as good as independent physical hardware but certainly worthwhile.

View on HN

We're not talking VM vs containers. We're talking VM vs no VM at all in base system.

I understand that. I'm saying that wrapping all the dev containers up inside a single VM serves to further protect the host system from the dev containers.

Reply on news.ycombinator.com