Re: [gentoo-hardened] docker updates

[Sven Vermeulen <sven.vermeulen@siphos.be>]

On Sat, Feb 28, 2015 at 3:58 AM, eric gisse <jowr.pi@gmail.com> wrote:
> Let's turn this around.
>
> What is the business case for containerization when security is so
> loose and ill-defined right now?

The promise (and depending on your context and regulations, this might
be true already as well) is that you can offer faster deployment of
application(s).

For instance, without containers development teams might need to
deploy to a non-production environment that is "shared" for all teams,
requiring rigid change management processes to make sure projects
don't step on other projects' toes.

With containers, development teams deploy their containers on a
non-production docker cluster without impact to other development
teams.

Security requirements here are a bit less than in production (due to
the non-production environment). When changes are matured, then change
management can bring this to the (non-Docker) production environment.

There are also of course possibilities to use containers in
production, but then the security management needs to be taken into
account again (which is definitely doable, just requires some
"different" thinking).

Wkr,
  Sven Vermeulen