Containers will continue to gain ground, but there are many use cases where VMs are still better suited. ... While a full VM can only issue hypercalls to the host
hypervisor, a
Docker container can make syscalls to the host kernel, which creates a larger surface area for attack.Mar 4, 2016
read more >>