Comment on What can I actually do with 64 GB or RAM?

• vk6flab@lemmy.radio ⁨1⁩ ⁨week⁩ ago

  In my case, I’m not a fan of running unknown code on the host. Docker and LXC are ways of running a process in a virtual security sandbox. If the process escapes the sandbox, they’re in your host.

  If they escape inside a VM, that’s another layer they have to penetrate to get to the host.

  It’s not perfect by any stretch of the imagination, but it’s better than a hole in the head.

  source
• webghost0101@sopuli.xyz ⁨1⁩ ⁨week⁩ ago

  I do use LXC but those are still pretty much a virtual machine.

  source

  • slazer2au@lemmy.world ⁨1⁩ ⁨week⁩ ago

    Fair point.

    source