do standard Docker vulnerabilities reside in this engine too?

gotoz / runq

run regular Docker images in KVM/Qemu

Apache License 2.0

802 stars 45 forks source link

do standard Docker vulnerabilities reside in this engine too? #6

Open jdavidthomson opened 5 years ago

jdavidthomson commented 5 years ago

I know that Docker has some bugs for RCE and other security issues. Does this engine end up being vulnerable to the same issues as stock Docker? I'm aware that it may introduce its own set of vulns, but i'm most concerned with finding a way to use docker images without exposing myself to dockers weaknesses.

Thanks!

pmorjan commented 5 years ago

Hi, runq is a runtime for the standard Docker engine. Therefore vulnerabilities of Docker (and runc) also apply but at a different layer. Qemu and the guest kernel build an isolation layer between application and host but docker is still used to launch the VM as a container.